CVE-2023-28789: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

CVE-2023-28781: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

PT-2023-21957 · Cimatti · Cimatti Consulting Wordpress Contact Forms

Name of the Vulnerable Software and Affected Versions: Cimatti Consulting WordPress Contact Forms by Cimatti plugin versions 1.5.4 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts in...

WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Contact Forms by Cimatti Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28781 Patch priority Medium CVSS severity Medium 7.1 Developer Cimatti Consulting PSID 6a3a28e27c2a Credits thien...

WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Contact Forms by Cimatti Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28789 Patch priority Medium CVSS severity Medium 7.1 Developer Cimatti Consulting PSID 1fd073a7aa0a Credits thien...

stecher-consulting.com Cross Site Scripting vulnerability OBB-3233618

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

CVE-2022-4933

A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarrmodulequicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2022-4933

A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarrmodulequicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. The attack may be launched remotely...

Sql injection

A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarrmodulequicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2022-4933 ATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice sql injection

A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarrmodulequicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2022-4933

Summary (concrete): CVE-2022-4933 affects ATM Consulting’s dolibarr_module_quicksupplierprice

Rapid7 Threat Command Delivered 311% ROI: 2023 Forrester Consulting Total Economic Impact™ Study

Volume up and not in a good way Security teams must continuously contort their efforts to effectively respond to the growing volume of cyberthreats. These constantly shifting methods in the security operations center SOC can be difficult to manage in the face of emerging external threats—it can b...

longobardiconsulting.com Cross Site Scripting vulnerability OBB-3193047

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-22284

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

Online Health Care System SQL注入漏洞

Online Health Care System is an online health care system by janobe individual developers. A security vulnerability exists in Online Health Care System v1.0, which stems from the consultingid parameter in its /healthcare/Admin/consultingdetail.php file that allows an attacker to implement SQL...

CVE-2022-46471

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consultingid parameter at /healthcare/Admin/consultingdetail.php...

PT-2023-14937 · Unknown · Online Health Care System

Name of the Vulnerable Software and Affected Versions: Online Health Care System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the consulting id parameter at the "/healthcare/Admin/consulting detail.php" API endpoint...