Lucene search
+L

22925 matches found

NVD
NVD
•added 2025/01/09 8:15 p.m.•50 views

CVE-2024-13263

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

5.5CVSS0.0027EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/01/09 7:15 p.m.•16 views

CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

5.5CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/01/09 7:15 p.m.•72 views

CVE-2024-13263

The Drupal Opigno group manager (versions 0.0.0 through 3.1.1) is vulnerable to a Static Code Injection flaw caused by the improper neutralization of directives in statically saved code. This vulnerability allows for PHP Local File Inclusion and can lead to arbitrary code execution via an adminis...

5.5CVSS6.9AI score0.0027EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/01/09 7:15 p.m.•57 views

CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 7:15 p.m.•15 views

CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

5.7AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/09 4:16 p.m.•44 views

CVE-2025-22595

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Reflected XSS.This issue affects Mailing Group Listserv: from n/a through = 2.0.9...

7.1CVSS0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/09 4:16 p.m.•15 views

CVE-2025-22527

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows SQL Injection.This issue affects Mailing Group Listserv: from n/a through = 2.0.9...

7.6CVSS0.00489EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 3:39 p.m.•33 views

CVE-2025-22527 WordPress Mailing Group Listserv Plugin <= 2.0.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows SQL Injection.This issue affects Mailing Group Listserv: from n/a through = 2.0.9...

7.6CVSS0.00489EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 3:39 p.m.•61 views

CVE-2025-22527

CVE-2025-22527 affects Mailing Group Listserv (WordPress plugin) up to version 2.0.9. The issue is described as an SQL Injection vulnerability, indicating improper handling of input in the plugin that can be exploited to manipulate the database. The CVSS score in the connected document is 7.6 ( H...

7.6CVSS7.3AI score0.00489EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 3:39 p.m.•8 views

CVE-2025-22527 WordPress Mailing Group Listserv Plugin <= 2.0.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows SQL Injection.This issue affects Mailing Group Listserv: from n/a through = 2.0.9...

7.6CVSS8.9AI score0.00489EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 3:39 p.m.•16 views

CVE-2025-22595 WordPress Mailing Group Listserv Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yamna Khawaja Mailing Group Listserv allows Reflected XSS.This issue affects Mailing Group Listserv: from n/a through 2.0.9...

7.1CVSS7.2AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 3:39 p.m.•43 views

CVE-2025-22595 WordPress Mailing Group Listserv Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Reflected XSS.This issue affects Mailing Group Listserv: from n/a through = 2.0.9...

7.1CVSS0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 3:39 p.m.•93 views

CVE-2025-22595

CVE-2025-22595 is a Reflected XSS in Mailing Group Listserv (WordPress plugin) affecting versions from n/a up to 2.0.9. The description and linked Red Hat/ENISA entries confirm a cross-site scripting vulnerability with CVSS v3.1 base score 7.1 (HIGH). No remediation or fix version is specified in...

7.1CVSS7.2AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•19 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, and CI/CD continuous integration and continuous delivery features. A security vulnerability exists in GitLab that stems from the fact that when users ar...

5.4CVSS6.6AI score0.00276EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•6 views

PT-2025-4518

Name of the Vulnerable Software and Affected Versions Yamna Khawaja Mailing Group Listserv versions prior to 2.0.9 Description The issue is related to the improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for SQL injection, which can...

7.6CVSS0.00489EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•13 views

WordPress plugin Mailing Group Listserv SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.6CVSS8.8AI score0.00489EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•29 views

PT-2025-4583 · Unknown · Yamna Khawaja Mailing Group Listserv

Name of the Vulnerable Software and Affected Versions: Yamna Khawaja Mailing Group Listserv versions n/a through 2.0.9 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS...

7.1CVSS7.1AI score0.00328EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•20 views

WordPress plugin Mailing Group Listserv 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.6AI score0.00328EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•7 views

CVE-2024-13263: Improper Neutralization of Directives in Statically Saved Code

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•18 views

Drupal 安全漏洞

Drupal is an open source content management system developed using the PHP language by the Drupal community. A security vulnerability exists in Drupal Opigno group manager prior to version 3.1.1, which stems from an unsuccessful neutralization of directives in statically saved code, resulting in ...

5.5CVSS7.3AI score0.0027EPSS
SaveExploits0References2
Rows per page
Query Builder