714 matches found
WordPress WP Post Columns Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Software WP Post Columns Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5708 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID c69c50e97d86 Credits István Márton Required...
Bookly < 22.4 - Admin+ SQLi
Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin Go to Bookly Settings Logs Do a search and intercept the request The parameter columns%5B0%5D%5Bdata%5D with...
Inventory Management System SQL注入漏洞
Inventory Management System is an inventory management system by the individual developer of stemword. Inventory Management System version 1.0 suffers from a SQL injection vulnerability that stems from the parameter columns0data in the file staffdata.php, which can lead to sql injection...
PT-2023-29264 · Sourcecodester · Sourcecodester Free/Open Source Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /index.php?page=member. The manipulation of the columns0data...
WP Adminify < 3.1.6 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Several fields in the plugin are...
Inventory Management System SQL注入漏洞
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns0data parameter that can lead to sql...
WP Adminify < 3.1.6 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Several fields in the plugin are...
CVE-2023-4201
A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file excatagorydata.php. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The exploi...
CVE-2023-4199
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagorydata.php. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate the attack remotely. The...
PT-2023-28209 · Sourcecodester · Sourcecodester Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Inventory Management System, affecting the file product data.php. The manipulation of the columns1data argument leads to...
PT-2023-28213 · Sourcecodester · Sourcecodester Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue affects the processing of the file ex catagory data.php, where the manipulation of the argument columns1data leads to sql injection. The attack can be...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. SourceCodester Inventory Management System version 1.0 suffers from a SQL injection vulnerability in the parameter columns1data in the file excatagorydata.php...
PT-2023-28204 · Sourcecodester · Sourcecodester Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the SourceCodester Inventory Management System, affecting the file catagory data.php. The manipulation of the columns1data argument leads to SQL...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. SourceCodester Inventory Management System version 1.0 suffers from a SQL injection vulnerability in the columns1data parameter of the productdata.php file...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. SourceCodester Inventory Management System version 1.0 suffers from a SQL injection vulnerability in the columns1data parameter of the catagorydata.php file...
WordPress SV Columns Manager Plugin <= 1.9.00 is vulnerable to Cross Site Scripting (XSS)
Software SV Columns Manager Type Plugin Vulnerable versions = 1.9.00 Fixed in 2.0.00 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 8ae25831d9ac Credits Rafie Muhammad Patchstack...
WordPress WordPress Admin Tables Extra Columns : Easy way to create custom columns on WordPress post, page & user admin tables Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software WordPress Admin Tables Extra Columns : Easy way to create custom columns on WordPress post, page & user admin tables Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS...
Super Store Finder 3.6 SQL Injection
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
CLSA-2023-1685380447 Fix CVE(s): CVE-2023-2610
SECURITY UPDATE: Crash when expanding "" in substitute causes very long text - debian/patches/CVE-2023-2610.patch: Limit the text length to MAXCOL - CVE-2023-2610...