1179 matches found
PT-2022-13439
Name of the Vulnerable Software and Affected Versions KiviCare WordPress plugin versions prior to 2.3.9 Description The issue concerns the KiviCare WordPress plugin, which does not properly sanitise and escape certain parameters before using them in SQL statements. This occurs via the ajax post...
WordPress plugin KiviCare SQL注入漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin KiviCare prior to version 2.3.9, which stems from the plugin not cleaning up and...
Sourcecodesterk Doctor Appointment System SQL Injection Vulnerability
Sourcecodesterk Doctor Appointment System is an open source application from Sourcecodesterk. Provides an appointment function. Sourcecodesterk Doctor Appointment System version 1.0 contains a SQL injection vulnerability, which stems from the program does not adequately filter the searchresult.ph...
CVE-2022-30516
In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...
CVE-2022-30516
In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks...
U.S. Charges Venezuelan Doctor for Using and Selling Thanos Ransomware
The U.S. Justice Department on Monday accused a 55-year-old cardiologist from Venezuela of being the mastermind behind Thanos ransomware, charging him with the use and sale of the malicious tool and entering into profit sharing arrangements. Moises Luis Zagala Gonzalez, also known by the monikers...
CVE-2022-28601
CVE-2022-28601 concerns the Simple 2FA Plugin for Moodle by LMS Doctor. A 2FA bypass exists: remote attackers can overwrite the phone number used for confirmation via profile.php, thus bypassing the phone verification mechanism. The affected component is the Moodle plugin’s 2FA handling; the root...
CVE-2022-28986
LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...
Spoofing
LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...
CVE-2022-28986
LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...
CVE-2022-28986
The CVE-2022-28986 entry concerns LMS Doctor Simple 2 Factor Authentication Plugin for Moodle (affected: 2021072900). The vulnerability is an Insecure Direct Object Reference (IDOR) that could let an attacker remotely update sensitive records (email, password, phone number) of other user accounts...
PT-2022-19344
Name of the Vulnerable Software and Affected Versions LMS Doctor Simple 2 Factor Authentication Plugin For Moodle version 2021072900 Description The issue allows remote attackers to update sensitive records, such as email, password, and phone number, of other user accounts due to an Insecure Dire...
CVE-2022-28986: Authorization Bypass Through User-Controlled Key
LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...
Moodle和Darwin Factor 安全漏洞
LMS Doctor 2 Factor Authentication for Moodle is a Moodle plugin for secondary authentication from LMS Doctor. A security vulnerability exists in LMS Doctor 2 Factor Authentication for Moodle that stems from the presence of a double authentication 2FA bypass issue. A remote attacker could use thi...
CVE-2022-28568
Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored...
CVE-2022-28568
Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored...
Sourcecodesterk Doctor Appointment System 代码问题漏洞
Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. It provides an appointment function. A security vulnerability exists in Sourcecodesterk Doctor Appointment System version 1.0, which stems from a remote command execution vulnerability in a file that is upload...
CVE
Tittle: Online Banking System File Upload to RCE Author:...