226 matches found
CVE-2024-51715
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...
CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...
CVE-2024-51715
CVE-2024-51715 is a SQL injection vulnerability in ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages (ClickWhale plugin for WordPress). Connected sources confirm an authenticated (Contributor+) SQL Injection impact, affecting versions up to 2.4.1 (no n/a...
CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...
The vulnerability of the software tools for managing identification and access control, as well as the ID Link Manager and the resource planning software FUJITSU Software TIME CREATOR, allows a perpetrator to gain unauthorized access to read and modify confidential information.
The vulnerability of the software tools for managing identification and access to the ID Link Manager, as well as the resource planning software FUJITSU Software TIME CREATOR, is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an...
CVE-2024-33620
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...
CVE-2024-34024
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...
CVE-2024-34024
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...
CVE-2024-34024
An information disclosure vulnerability (CWE-204) exists in ID Link Manager and FUJITSU Software TIME CREATOR products provided by Fsas Technologies Inc. Due to an observable response discrepancy , an unauthenticated remote attacker can determine whether a specific username is valid. Affected Pro...
CVE-2024-33620
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...
CVE-2024-33620
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...
CVE-2024-33620
An absolute path traversal vulnerability (CWE-36) exists in ID Link Manager and FUJITSU Software TIME CREATOR products provided by Fsas Technologies Inc. An unauthenticated remote attacker can exploit this flaw to retrieve server file contents, potentially exposing sensitive information . Affecte...
CVE-2024-33622
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker...
CVE-2024-33622
A missing authentication for a critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR products by Fsas Technologies Inc. A remote authenticated attacker can exploit this flaw to obtain sensitive information or modify data stored in the database. Affected versi...
CVE-2024-33622
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker...
Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
Overview ID Link Manager and FUJITSU Software TIME CREATOR provided by Fsas Technologies Inc. contain multiple vulnerabilities listed below. Path Traversal CWE-36 CVE-2024-33620 Missing Authentication CWE-306 CVE-2024-33622 Information disclosure CWE-204 CVE-2024-34024 Christian Demko of WithSecu...
CVE-2024-33620: Absolute Path Traversal
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...
CVE-2024-34024: Undefined Security Weakness
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...
PT-2024-25651 · Fujitsu · Fujitsu Software Time Creator
Name of the Vulnerable Software and Affected Versions: ID Link Manager affected versions not specified FUJITSU Software TIME CREATOR affected versions not specified Description: The issue allows an unauthenticated remote attacker to determine if a username is valid or not by exploiting an...
Fujitsu ID Link Manager and Fujitsu TIME CREATOR Security Vulnerability
Fujitsu ID Link Manager and Fujitsu TIME CREATOR are both products of Fujitsu, Japan.Fujitsu ID Link Manager is an ID manager.Fujitsu TIME CREATOR is a business content management software. A security vulnerability exists in Fujitsu ID Link Manager and Fujitsu TIME CREATOR. A remote attacker coul...