Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:32 a.m.5 views

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...

9.8CVSS8AI score0.00224EPSS
Exploits0References1
OSV
OSV
added 2024/10/21 8:15 p.m.2 views

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...

9.8CVSS6AI score0.00224EPSS
Exploits0References1
NVD
NVD
added 2024/10/21 8:15 p.m.11 views

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...

9.8CVSS0.00224EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.1 views

Learning with Texts SQL注入漏洞

Learning with Texts LWT is a software application by the individual developer Jon Gauthier. It allows users to import text, read, save, view and test words and expressions in multiple languages. A security vulnerability exists in Learning with Texts LWT version 2.0.3, which stems from...

9.8CVSS8.2AI score0.00224EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/21 12:0 a.m.2 views

PT-2024-33127 · Unknown · Learning With Texts

Name of the Vulnerable Software and Affected Versions: Learning with Texts LWT version 2.0.3 Description: The issue occurs due to the application's failure to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. Thi...

9.8CVSS8.1AI score0.00224EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/10/21 12:0 a.m.11 views

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...

9.9AI score0.00224EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/21 12:0 a.m.16 views

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...

0.00224EPSS
Exploits0References1
CVE
CVE
added 2024/10/21 12:0 a.m.41 views

CVE-2024-48509

CVE-2024-48509 affects Learning with Texts (LWT) 2.0.3. Multiple sources describe a SQL Injection vulnerability caused by inadequate input sanitization in URL parameters, enabling an attacker to manipulate queries and potentially access, modify, or delete data and execute arbitrary commands. The ...

9.8CVSS8AI score0.00224EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/08/21 7:15 p.m.19 views

CVE-2024-41572

Learning with Texts LWT 2.0.3 is vulnerable to Cross Site Scripting XSS. The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user...

6.1CVSS0.00206EPSS
Exploits0References1
OSV
OSV
added 2024/08/21 7:15 p.m.2 views

CVE-2024-41572

Learning with Texts LWT 2.0.3 is vulnerable to Cross Site Scripting XSS. The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user...

6.1CVSS5.9AI score0.00206EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/21 12:0 a.m.3 views

Learning with Texts 安全漏洞

Learning with Texts LWT is a software application by the individual developer Jon Gauthier. It allows users to import text, read, save, view and test words and expressions in multiple languages. A security vulnerability exists in Learning with Texts version 2.0.3, which stems from not filtering...

6.1CVSS6.8AI score0.00206EPSS
Exploits0References3
CVE
CVE
added 2024/08/21 12:0 a.m.51 views

CVE-2024-41572

CVE-2024-41572 affects Learning with Texts (LWT) 2.0.3. The root cause is a function that does not filter special characters in URL parameters, enabling remote attackers to perform Cross Site Scripting (XSS). The vulnerability allows attackers to inject JavaScript, potentially stealing user crede...

6.1CVSS6.4AI score0.00206EPSS
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2018/10/18 12:0 a.m.87 views

Learning with Texts 1.6.2 - 'start' SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/10/18 12:0 a.m.32 views

Learning With Texts 1.6.2 SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

0.5AI score
Exploits0
exploitpack
exploitpack
added 2018/10/18 12:0 a.m.14 views

Learning with Texts 1.6.2 - start SQL Injection

Learning with Texts 1.6.2 - start SQL Injection Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version:...

0.4AI score
Exploits0
0day.today
0day.today
added 2018/10/18 12:0 a.m.54 views

Learning with Texts 1.6.2 - start SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webap...

Exploits0
Rows per page
Query Builder