CVE-2023-37177

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...

PMB SQL Injection Vulnerability

PMB is a 100% free document management reference tool from the PMB Services team. A SQL injection vulnerability exists in PMB version v.7.4.7 that originates from allowing an unauthenticated, remote attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php...

PMB SQL Injection Vulnerability

PMB is a 100% free document management reference tool from the PMB Services team. A SQL injection vulnerability exists in PMB version v.7.4.7, which originates from a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code via thesaurus parameter in...

CVE-2023-51828

CVE-2023-51828 concerns PMB (Paper Management/Bibliography) prior to version 7.4.7 where a SQL injection exists in the admin/convert/export.class.php file. The vulnerability allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in the get_next_notice fu...

PT-2024-17959 · WordPress · The Login Lockdown – Protect Login Form

Name of the Vulnerable Software and Affected Versions: The Login Lockdown – Protect Login Form plugin for WordPress versions up to, and including, 2.08 Description: The issue is related to a missing capability check on the generate export file function. This allows authenticated attackers with...

GHSA-JFRG-9HPQ-9HVP Improper Access Control in moodle

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

Improper Access Control in moodle

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

Default configuration

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

UBUNTU-CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

CVE-2024-25981 affects Moodle: Separate Groups mode restrictions were not honored during a forum export, causing data from all groups to be exported. By default this granted additional access to non-editing teachers. The connected documents confirm this is a Moodle forum export behavior issue; no...

CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-20953

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

CVE-2024-20953

CVE-2024-20953 affects Oracle Agile PLM (Supply Chain) 9.3.6, specifically the Export component. The Nessus NASL notes this vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise Oracle Agile PLM, with potential takeover and a CVSS v3.1 base score of 8.8 (C/H, ...

CVE-2024-21775

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...

CVE-2024-25413

CVE-2024-25413 describes a XSLT Server-Side Injection in the FireBear Improved Import And Export plugin, Version 3.8.6, within the Import Jobs function. An attacker can execute arbitrary commands by supplying a crafted XSLT file. The PT-2024-20928 entry confirms the affected software/versions and...

PT-2024-20928 · Unknown · Firebear Improved Import/Export

Name of the Vulnerable Software and Affected Versions: FireBear Improved Import And Export version 3.8.6 Description: A XSLT Server Side injection vulnerability in the Import Jobs function allows attackers to execute arbitrary commands via a crafted XSLT file. The vulnerability can be exploited b...