CVE-2024-6147 Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

PT-2024-37415 · Poly · Poly Plantronics Hub

Name of the Vulnerable Software and Affected Versions: Poly Plantronics Hub affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged...

PT-2024-37316 · Unknown · Itsourcecode Online Bookstore

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Book Store version 1.0 Description: A critical issue affects the processing of the file admin delete.php. The manipulation of the bookisbn argument leads to SQL injection. The attack can be initiated remotely...

Online Book Store SQL Injection Vulnerability

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. The SQL injection vulnerability exists in itsourcecode Online Book Store version 1.0, which stems from admindelete.php containing unknown processing that leads to SQL injection via the parameter bookisbn...

CVE-2023-51636

Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-51636

Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

PT-2024-21978

Name of the Vulnerable Software and Affected Versions: GNU Savane versions 3.12 and earlier Description: The issue allows a remote attacker to delete arbitrary files via crafted input to the trackers data delete file function. This is due to an Insecure Direct Object Reference IDOR in the softwar...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /delete.php...

CVE-2024-1252

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/askduty/delete.php. The manipulation of the argument ASKDUTYID leads to sql injection. The exploit has been disclosed to...

PT-2024-17638 · Unknown · Tongda Oa 2017

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical vulnerability was found in Tongda OA 2017. The issue affects an unknown functionality of the file /general/attendance/manage/ask duty/delete.php. The manipulation of the ASK DUTY ID...

PT-2024-17634 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.10 Description: A critical vulnerability has been found in Tongda OA. The issue affects an unknown function of the file /general/email/outbox/delete.php. The manipulation of the DELETE STR argument leads to SQ...

Tongda2000 SQL Injection Vulnerability

Tongda2000 is a network intelligent office system of China Tongda Tongda company. Tongda2000 11.9 and earlier versions exist SQL injection vulnerability, the vulnerability stems from the parameter PROJIDSTR in the file general/project/proj/delete.php can lead to SQL injection...

DashMachine Security Breach

DashMachine is a web application bookmarking dashboard by Ross Mountjoy Individual Developer. A security vulnerability exists in DashMachine version 0.5-4, which stems from the parameter file in the file /settings/deletefile that causes path traversal...

PT-2023-32809 · Rmountjoy92 · Dashmachine

Name of the Vulnerable Software and Affected Versions: rmountjoy92 DashMachine versions 0.5 through 4 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /settings/delete file. The manipulation of the argument file leads to path traversal...

PT-2023-32712 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue was found in some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the DELETE STR argument leads to sql injection. The issue has been...

CVE-2023-45253

An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attackers to manipulate files and escalate privileges via RollingFileAppender.DeleteFile method performed by the log4net library...

CVE-2023-45253

An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attackers to manipulate files and escalate privileges via RollingFileAppender.DeleteFile method performed by the log4net library...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 11.9 and earlier versions, which stems from the parameter PROJIDSTR in the file general/wiki/cp/ct/delete.php that can lead to SQL injection...

TONGDA Office Anywhere Security Breach

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere 2017 11.9 and earlier versions, which originates from a SQL injection vulnerability in the file general/vehicle/checking/delete.php...

CVE-2023-6052

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of the file general/system/censorwords/module/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...