878 matches found
PT-2024-37443 · Unknown · Itsourcecode Farm Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Farm Management System version 1.0 Description: A critical issue affects the itsourcecode Farm Management System, specifically the username argument in the file index.php of the Login component, leading to SQL injection. This can...
CVE-2024-6190: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...
Farm Management System SQL Injection Vulnerability
Farm Management System is an itsourcecode open source farm management system. A SQL injection vulnerability exists in itsourcecode Farm Management System version 1.0, which originates from the index.php in the component Login, which contains some unknown functions that lead to SQL injection via t...
CVE-2024-34701: Incorrect Authorization
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...
CVE-2024-34701 CreateWiki vulnerable to impersonation of wiki requester
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...
CVE-2024-34701 CreateWiki vulnerable to impersonation of wiki requester
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...
@brbb/bot-farm-ts (>=0.0.1, <=0.0.3), @phantasia/blockchain-interface (>=3.6.10, <=5.0.0) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.47.2, <=1.47.3)
@solana/web3.js NPM version =1.47.2, =0.0.1, =3.6.10, =1.13.2, =1.0.0, =0.3.53, =0.3.54 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
mainefarmbureau.us Cross Site Scripting vulnerability OBB-3883303
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cyder-press-farm.igloucestershire.com Cross Site Scripting vulnerability OBB-3874009
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
BIT-MEDIAWIKI-2020-25827
An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster such as via CentralAuth, rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across...
Citrix Provisioning - Farm Is Already Configured Option Missing From Wizard After Upgrade
After running the PVS installer for 2311 or greater the configuration wizard runs as expected. When running the wizard the console user is only presented with 2 options when configuring the database parameters: 1. Join Existing 2.Create Farm The Farm is already configured option is no longer...
CVE-2023-48135
An issue in mimasakafarm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2024-13550 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the mimasaka farm mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, update to a newer version that...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the mimasakafarm applet that may disclose access tokens...
CVE-2024-0355
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...
CVE-2024-0355
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...
Sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...
CVE-2024-0355 PHPGurukul Dairy Farm Shop Management System add-category.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...
CVE-2024-0355 PHPGurukul Dairy Farm Shop Management System add-category.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and...
CVE-2024-0355
CVE-2024-0355 affects PHPGurukul Dairy Farm Shop Management System up to version 1.1. The issue is a SQL injection in an unknown function of add-category.php, triggered by manipulating the category parameter. Exploit has been disclosed publicly; VDB-250122 is the assigned identifier. NVD/CVSS dat...