Lucene search
+L

878 matches found

Positive Technologies
Positive Technologies
•added 2024/06/20 12:00 a.m.•19 views

PT-2024-37443 · Unknown · Itsourcecode Farm Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Farm Management System version 1.0 Description: A critical issue affects the itsourcecode Farm Management System, specifically the username argument in the file index.php of the Login component, leading to SQL injection. This can...

9.8CVSS8.6AI score0.00627EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/20 12:00 a.m.•0 views

CVE-2024-6190: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...

9.8CVSS6.9AI score0.00627EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/20 12:00 a.m.•11 views

Farm Management System SQL Injection Vulnerability

Farm Management System is an itsourcecode open source farm management system. A SQL injection vulnerability exists in itsourcecode Farm Management System version 1.0, which originates from the index.php in the component Login, which contains some unknown functions that lead to SQL injection via t...

9.8CVSS8AI score0.00627EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•1 views

CVE-2024-34701: Incorrect Authorization

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...

5.9CVSS5.7AI score0.00647EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/13 3:54 p.m.•35 views

CVE-2024-34701 CreateWiki vulnerable to impersonation of wiki requester

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...

5.9CVSS5.8AI score0.00647EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/05/13 3:54 p.m.•19 views

CVE-2024-34701 CreateWiki vulnerable to impersonation of wiki requester

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...

5.9CVSS6.6AI score0.00647EPSS
SaveExploits0References6
vulnersOsv
vulnersOsv
•added 2024/04/17 6:21 p.m.•6 views

@brbb/bot-farm-ts (>=0.0.1, <=0.0.3), @phantasia/blockchain-interface (>=3.6.10, <=5.0.0) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.47.2, <=1.47.3)

@solana/web3.js NPM version =1.47.2, =0.0.1, =3.6.10, =1.13.2, =1.0.0, =0.3.53, =0.3.54 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

7.5CVSS5.4AI score0.00593EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/03/21 5:37 p.m.•13 views

mainefarmbureau.us Cross Site Scripting vulnerability OBB-3883303

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/03/16 3:26 a.m.•11 views

cyder-press-farm.igloucestershire.com Cross Site Scripting vulnerability OBB-3874009

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
•added 2024/03/06 11:13 a.m.•28 views

BIT-MEDIAWIKI-2020-25827

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster such as via CentralAuth, rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across...

7.5CVSS7.4AI score0.01704EPSS
SaveExploits1References5
Citrix
Citrix
•added 2024/02/26 12:00 a.m.•15 views

Citrix Provisioning - Farm Is Already Configured Option Missing From Wizard After Upgrade

After running the PVS installer for 2311 or greater the configuration wizard runs as expected. When running the wizard the console user is only presented with 2 options when configuring the database parameters: 1. Join Existing 2.Create Farm The Farm is already configured option is no longer...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/01/26 7:15 a.m.•16 views

CVE-2023-48135

An issue in mimasakafarm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS5.8AI score0.00359EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/26 12:00 a.m.•14 views

PT-2024-13550 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the mimasaka farm mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, update to a newer version that...

5.4CVSS5.4AI score0.00359EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/01/26 12:00 a.m.•13 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the mimasakafarm applet that may disclose access tokens...

5.4CVSS6.8AI score0.00359EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/10 12:15 a.m.•32 views

CVE-2024-0355

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...

9.8CVSS6.9AI score0.00697EPSS
SaveExploits1References3
OSV
OSV
•added 2024/01/10 12:15 a.m.•12 views

CVE-2024-0355

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...

9.8CVSS5.6AI score0.00697EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/10 12:15 a.m.•26 views

Sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...

5.2CVSS7.7AI score0.00697EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/09 11:31 p.m.•13 views

CVE-2024-0355 PHPGurukul Dairy Farm Shop Management System add-category.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...

5.5CVSS7.4AI score0.00697EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/09 11:31 p.m.•46 views

CVE-2024-0355 PHPGurukul Dairy Farm Shop Management System add-category.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...

5.5CVSS10AI score0.00697EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/09 11:31 p.m.•95 views

CVE-2024-0355

CVE-2024-0355 affects PHPGurukul Dairy Farm Shop Management System up to version 1.1. The issue is a SQL injection in an unknown function of add-category.php, triggered by manipulating the category parameter. Exploit has been disclosed publicly; VDB-250122 is the assigned identifier. NVD/CVSS dat...

9.8CVSS9.7AI score0.00697EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder