CVE-2023-0706

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file managerecord.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-0706

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file managerecord.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-0706 SourceCodester Medical Certificate Generator App manage_record.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file managerecord.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-0706

The CVE-2023-0706 entry concerns SourceCodester Medical Certificate Generator App 1.0. The vulnerability lies in the manage_record.php functionality, where manipulating the id parameter leads to SQL injection. It can be exploited remotely without user interaction, potentially compromising confide...

syft 日志信息泄露漏洞

syft is a CLI tool and Go library for generating a software bill of materials SBOM from container images and filesystems. A log message disclosure vulnerability exists in syft, which stems from a password disclosure stored in the SYFTATTESTPASSWORD environment variable...

CVE-2022-4321

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin...

CVE-2022-4321

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin...

Cross site scripting

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin...

CVE-2022-4321 PDF Generator for WordPress < 1.1.2 - Reflected XSS

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin...

CVE-2022-4321 PDF Generator for WordPress < 1.1.2 - Reflected XSS

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin...

CVE-2022-4321

The CVE-2022-4321 entry concerns the WordPress plugin PDF Generator for WordPress (pre-1.1.2) which ships a vendored dompdf example file. The underlying issue is a Reflected Cross-Site Scripting (XSS) vulnerability in that embedded dompdf example, enabling an attacker to target high-privilege use...

WordPress plugin PDF Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting...

[SECURITY] Fedora 36 Update: rust-1.66.1-1.fc36

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

PT-2023-13779 · Mitsubishi · Melsec Iq-F Series Fx5Uc-32Mr/Ds-Ts +4

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z versions 1.280 and prior Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z versions 1.074 and prior Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z...

PDF Generator for WordPress < 1.1.2 - Reflected XSS

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin PoC Make a logged in admin open the following URL:...

WordPress PDF Generator for WordPress – Create & Customize PDF for Post, Pages and WooCommerce Products Plugin < 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software PDF Generator for WordPress – Create & Customize PDF for Post, Pages and WooCommerce Products Type Plugin Vulnerable versions 1.1.2 Fixed in 1.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4321 Patch priority Low CVSS severity Low 7.1...

PDF Generator for WordPress < 1.1.2 - Reflected XSS

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin Make a logged in admin open the following URL:...

OBridge SQL注入漏洞

OBridge is a simple Java source code generator. A SQL injection vulnerability exists in karsany OBridge version 1.3 and earlier. An attacker could exploit this vulnerability to perform a sql injection attack...

CVE-2023-22493

RSSHub (Node.js) is affected by a Server-Side Request Forgery (SSRF) vulnerability caused by unsafe route parameter handling. An attacker can induce the server to issue arbitrary HTTP requests, potentially accessing internal resources. The issue is mitigated by patch commit a66cbcf in RSSHub, and...

PT-2023-18544 · Rsshub · Rsshub

Name of the Vulnerable Software and Affected Versions: RSSHub affected versions not specified Description: RSSHub is an open source RSS feed generator that is vulnerable to Server-Side Request Forgery SSRF attacks. This issue allows an attacker to send arbitrary HTTP requests from the server to...