CVE-2021-30117

The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId. Detailed description --- Given the following request: GET /InstallTab/exportFldr.asp?fldrId=1’ HTTP/1.1 Host: 192.168.1.194 User-Agent: Mozilla/5.0 Macintosh;...

Unspecified vulnerability in myFax

myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

Information disclosure

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

CVE-2020-24038

CVE-2020-24038 affects myFax version 229, where the export log module logs sensitive information, enabling access to critical data by any user. The Red Hat, CNVD, CNNVD and related records corroborate an information disclosure flaw rooted in the export logging, resulting in exposure of sensitive ...

MyFax 日志信息泄露漏洞

myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...

CVE-2021-24451

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...

CVE-2021-24451

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...

Sql injection

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...

CVE-2021-24451

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...

CVE-2021-24451

The CVE-2021-24451 entry concerns the WordPress plugin Export Users With Meta (before 0.6.5). The vulnerability arises because the plugin did not escape the list of roles when constructing the SQL in the export function, which is accessible to admins, enabling authenticated SQL injection. Affecte...

CVE-2021-24451 Export Users With Meta < 0.6.5 - Authenticated SQL Injection

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...

WordPress 插件 SQL注入漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Meta plugin is an application plugin for WordPress. A SQL injection vulnerability exists in the WordPress Export Users...

Atlassian Confluence 6.1.x < 6.6.16 Local File Disclosure

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.x /confluence/WEB-INF/ directory and it's subdirectories. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...

Atlassian Confluence 6.7.x < 6.13.7 Local File Disclosure

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.x /confluence/WEB-INF/ directory and it's subdirectories. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...

Atlassian Confluence 6.14.x < 6.15.8 Local File Disclosure

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.x /confluence/WEB-INF/ directory and it's subdirectories. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...

`export default thing` is different to `export { thing as default }`

Dominic Elm DM'd me on Twitter to ask me questions about circular dependencies, and, well, I didn't know the answer. After some testing, discussion, and ahem chatting to the V8 team, we figured it out, but I learned something new about JavaScript along the way. I'm going to leave the circular...

WordPress Modern Events Calendar 5.16.2 Information Disclosure

Exploit Title: Wordpress Plugin Modern Events Calendar 5.16.2 - Event export Unauthenticated Date 01.07.2021 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://webnus.net/modern-events-calendar/ Software Link: https://downloads.wordpress.org/plugin/modern-events-calendar-lite.5.16.2.z...