Carlisting SQL注入漏洞

Carlisting is a responsive car listings directory content management system CMS by the phpscriptpoint team. A SQL injection vulnerability exists in Carlisting version 1.6, which stems from unknown processing of the file search.php in the component GET Parameter Handler, via the parameters...

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

Cross site request forgery (csrf)

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

WebBoss.io 安全漏洞

WebBoss.io is a website building platform for professional designers and developers from WebBoss.io. A security vulnerability exists in WebBoss.io CMS version v3.7.0, which stems from an access control issue that allows an attacker to access the website backup tool via a crafted GET request...

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

Sql injection

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The...

CVE-2023-3795 Bug Finder ChainCity Real Estate Investment Platform GET Parameter property sql injection

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The...

PT-2023-26197 · Unknown · Bug Finder Chaincity Real Estate Investment Platform

Name of the Vulnerable Software and Affected Versions: Bug Finder ChainCity Real Estate Investment Platform version 1.0 Description: A critical vulnerability was found in the Bug Finder ChainCity Real Estate Investment Platform. The issue affects an unknown functionality of the file /property of...

Bug Finder ChainCity Real Estate Investment Platform SQL注入漏洞

Bug Finder ChainCity Real Estate Investment Platform is a real estate investment platform from Bug Finder, Inc. A SQL injection vulnerability exists in Bug Finder ChainCity Real Estate Investment Platform version 1.0, which stems from the parameter name of the component GET Parameter Handler that...

WordPress WP Get Personal Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Get Personal Type Plugin Vulnerable versions = 1.5.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 98e76fb7a2d5 Credits Rafie Muhammad Patchstack Required...

The vulnerability of D-Link DIR-823G router microprogramming software, related to the failure to take measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of D-Link DIR-823G router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the EXCUSHELL header. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially...

WordPress Get Cash Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Get Cash Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2801248ebadb Credits Rafie Muhammad Patchstack Required privileg...

CVE-2023-3690

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be launched...

Sql injection

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be launched...

Sql injection

A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack can be launched remotely. The...

CVE-2023-3688

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Parameter Handler. The manipulation of the argument keywords/gender leads to sql injection. It is possible to launch the attack remotely. VDB-234234 is the identifi...

CVE-2023-3688

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Parameter Handler. The manipulation of the argument keywords/gender leads to sql injection. It is possible to launch the attack remotely. VDB-234234 is the identifi...

CVE-2023-3687 Bylancer QuickVCard GET Parameter blog sql injection

A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown processing of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be initiated remotely. The identifier...

CVE-2023-3686

A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects unknown code of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack can be initiated remotely. The...