4034 matches found
PT-2024-39375 · Unknown · Crmgo Saas
Name of the Vulnerable Software and Affected Versions: CodeCanyon CRMGo SaaS versions up to 7.2 Description: A problematic issue has been found in the software, affecting some unknown processing of the file "/project/task/task id/show". The manipulation of the comment argument leads to cross-site...
CVE-2024-9008
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...
CVE-2024-9008 SourceCodester Best Online News Portal Comment Section news-details.php sql injection
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...
CVE-2024-9008 SourceCodester Best Online News Portal Comment Section news-details.php sql injection
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...
PT-2024-39363 · Unknown · Sourcecodester Best Online News Portal
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical vulnerability was found in the Comment Section of the SourceCodester Best Online News Portal. The issue affects unknown code in the file /news-details.php. The...
CVE-2024-8478
The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' option is enabled. This makes it...
CVE-2024-42024
creationtimestamp| type| source ---|---|--- 2024-09-05 22:40:17+00:00| seen| Telegram/2paEDeP02FonhasdWZ5DOTlSfP9HXbNaBwWkCheKZVeaUA 2024-09-05 22:40:17+00:00| seen| https://t.me/tengkorakcybercrewz/3973 2024-09-06 00:26:00+00:00| seen| Telegram/H0bymnaDZsjBJZbbufohqYE3SBtAIPDM1Sz-s9D2SdUOEA...
CVE-2024-6585
CVE-2024-6585 affects Lightdash v0.1024.6, with multiple stored XSS vulnerabilities in the markdown dashboard and dashboard comment functionality. The flaws allow remote authenticated threat actors to store and execute malicious JavaScript in the context of a user session. The PT-2024-37737 advis...
CVE-2024-3944
The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to...
HackerOne: Bypass comment restriction
Vulnerability description not provided...
The vulnerability of the Netcat CMS system’s comment module allows a hacker to execute arbitrary JavaScript code.
The vulnerability of the Netcat CMS system’s comment module exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...
The vulnerability in the implementation of the deleteComment method in the comments module of the CMS system Netcat allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the deleteComment method in the comments module of the CMS system Netcat is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to the protected information...
CVE-2024-35539
Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...
PT-2024-26530 · Typecho · Typecho
Name of the Vulnerable Software and Affected Versions: Typecho version 1.3.0 Description: A race condition issue was found in the post commenting function, allowing attackers to post multiple comments before spam protection checks are applied, particularly if comments are posted at a high...
WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability
Unauthenticated Comment UserID And IP address Disclosure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Contest Gallery versions = 23.1.2...
CVE-2024-41614
symphonycms =2.7.10 is vulnerable to Cross Site Scripting XSS in the Comment component for articles...
CVE-2024-41614
symphonycms =2.7.10 is vulnerable to Cross Site Scripting XSS in the Comment component for articles...
CVE-2024-41614
symphonycms =2.7.10 is vulnerable to Cross Site Scripting XSS in the Comment component for articles...
Symphony CMS 安全漏洞
Symphony CMS is a content management system from Symphony CMS open source. A security vulnerability exists in Symphony CMS version 2.7.10 and earlier, which stems from a cross-site scripting XSS vulnerability in the component Comment...