5536 matches found
CVE-2024-47919 Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-47918
CVE-2024-47918 pertains to Tiki Wiki CMS Groupware, with publicly available details indicating a CWE-80 Basic XSS due to improper neutralization of script-related HTML tags in web pages, affecting versions before 28.0 (OpenVAS entry notes multiple vulnerabilities). Additional sources flag potenti...
CVE-2024-47918 Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...
CVE-2024-47917 Mobotix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PT-2024-32902 · Tecnick · Tcexam
Name of the Vulnerable Software and Affected Versions: Tecnick TCExam affected versions not specified Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL Injection. This occurs because special elements in an SQL command are no...
CVE-2024-9774: Improper Neutralization of Escape, Meta, or Control Sequences
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-56527: Improper Neutralization of Input During Web Page Generation
An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message...
Marp Core allows XSS by improper neutralization of HTML sanitization
Marp Core @marp-team/marp-core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting XSS due to improper neutralization of HTML sanitization. Impact Marp Core includes an HTML sanitizer with allowlist support. In the affected versions, the built-in allowlist is enabled by...
CVE-2024-56510: Improper Neutralization of Input During Web Page Generation
@marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting XSS due to improper neutralization of HTML sanitization. Marp Core v3.9.1 and v4.0.1 have been patch...
Improper Neutralization
Overview Affected versions of this package are vulnerable to Improper Neutralization when importing a macro in a template whose filename is also a template. This will result in a SyntaxError: f-string: invalid syntax error message because the filename is not properly escaped, indicating that it i...
CVE-2024-9102 phpLDAPadmin: Improper Neutralization of Formula Elements
phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value CSV file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet...
CVE-2024-52794: Improper Neutralization of Input During Web Page Generation
Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability...
CVE-2024-47093: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...
CVE-2024-55975 WordPress Dr Affiliate plugin <= 1.2.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rohit Urane Dr Affiliate allows SQL Injection.This issue affects Dr Affiliate: from n/a through 1.2.3...
CVE-2024-55985 WordPress YDS Support Ticket System plugin <= 1.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ydesignservices YDS Support Ticket System yds-support-ticket-system allows SQL Injection.This issue affects YDS Support Ticket System: from n/a through = 1.0...
WordPress plugin Saksh Escrow System SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...
CVE-2024-55984: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in susheelhbti Saksh Escrow System saksh-escrow-system allows SQL Injection.This issue affects Saksh Escrow System: from n/a through = 2.4...
Amiro.CMS 安全漏洞
Amiro.CMS is a commercial content management system from Amiro.CMS, Inc. A security vulnerability exists in Amiro.CMS versions prior to 7.8.4 that stems from improper neutralization of special elements and is vulnerable to cross-site scripting attacks...
CVE-2024-55975: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rohit Urane Dr Affiliate dr-affiliate allows SQL Injection.This issue affects Dr Affiliate: from n/a through = 1.2.3...
