Lucene search
+L

7170 matches found

CNNVD
CNNVD
added 2025/01/30 12:00 a.m.18 views

WordPress plugin Simple:Press Forum 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS8.2AI score0.00349EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/19 5:15 p.m.6 views

CVE-2024-12788

A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS5.8AI score0.00778EPSS
SaveExploits1References4
NVD
NVD
added 2024/12/19 5:15 p.m.18 views

CVE-2024-12788

A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS0.00778EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/12/19 4:31 p.m.11 views

CVE-2024-12788 Codezips Technical Discussion Forum signinpost.php sql injection

A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has...

7.5CVSS7.3AI score0.00778EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/12/19 4:31 p.m.30 views

CVE-2024-12788 Codezips Technical Discussion Forum signinpost.php sql injection

A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has...

7.5CVSS0.00778EPSS
SaveExploits1References4
CVE
CVE
added 2024/12/19 4:31 p.m.55 views

CVE-2024-12788

Codezips Technical Discussion Forum 1.0 contains an SQL injection in signinpost.php via the username parameter. The vulnerability can be triggered remotely, with exploits disclosed publicly; root cause is manipulation of the username argument. No official patch/version is stated; a PT-Security re...

9.8CVSS7.5AI score0.00778EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/19 12:00 a.m.10 views

PT-2024-17738 · Unknown · Codezips Technical Discussion Forum

Name of the Vulnerable Software and Affected Versions: Codezips Technical Discussion Forum version 1.0 Description: A critical issue affects some unknown functionality of the file signinpost.php. The manipulation of the username argument leads to SQL injection. The attack may be launched remotely...

9.8CVSS8.1AI score0.00778EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/12/19 12:00 a.m.5 views

Codezips Technical Discussion Forum 注入漏洞

Codezips Technical Discussion Forum is a Codezips open source technical discussion forum. An injection vulnerability exists in Codezips Technical Discussion Forum version 1.0, which stems from an SQL injection vulnerability in the username parameter of the signinpost.php file...

9.8CVSS7.8AI score0.00778EPSS
SaveExploits1References4
OSV
OSV
added 2024/12/12 1:40 a.m.8 views

CVE-2024-12484

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

9.8CVSS5.8AI score0.00949EPSS
SaveExploits1References4
NVD
NVD
added 2024/12/12 1:40 a.m.21 views

CVE-2024-12484

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

9.8CVSS0.00949EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.6 views

Codezips Technical Discussion Forum 注入漏洞

Codezips Technical Discussion Forum is a Codezips open source technical discussion forum. An injection vulnerability exists in Codezips Technical Discussion Forum version 1.0, which stems from the parameter Username in the file /signuppost.php that can cause SQL injection...

9.8CVSS7.9AI score0.00949EPSS
SaveExploits1References4
CVE
CVE
added 2024/12/11 8:00 p.m.67 views

CVE-2024-12484

CVE-2024-12484 affects Codezips Technical Discussion Forum 1.0, with a SQL injection in /signuppost.php caused by manipulating the Username parameter. The vulnerability is exploitable remotely and exploitation has been disclosed publicly. Affected code is described as unknown elsewhere in the doc...

9.8CVSS7.6AI score0.00949EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/11 8:00 p.m.16 views

CVE-2024-12484 Codezips Technical Discussion Forum signuppost.php sql injection

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.5CVSS7.5AI score0.00949EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/12/11 8:00 p.m.27 views

CVE-2024-12484 Codezips Technical Discussion Forum signuppost.php sql injection

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.5CVSS0.00949EPSS
SaveExploits1References4
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2024/12/10 12:00 a.m.33 views

Stable Channel Update for Desktop

The Stable channel has been updated to 131.0.6778.139/.140 for Windows, Mac and 131.0.6778.139 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

8.8CVSS7.4AI score0.04941EPSS
SaveExploits2Affected Software1
OSV
OSV
added 2024/12/09 1:15 p.m.10 views

CVE-2023-47869

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5...

5.4CVSS5.8AI score0.00296EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.24 views

CVE-2023-47869

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5...

5.4CVSS0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.8 views

WordPress plugin wpForo Forum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.6AI score0.00296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.10 views

PT-2024-13526 · Unknown · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum versions prior to 2.2.5 Description: The issue is related to an improper neutralization of script-related HTML tags in a web page, which allows code injection. This is a type of Basic XSS vulnerability. Recommendations: For...

5.4CVSS9.3AI score0.00296EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/04 5:15 p.m.8 views

CVE-2024-52676

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits1References1
Rows per page
Query Builder