2980 matches found
CVE-2024-2333
A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Sql injection
A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-2333 CodeAstro Membership Management System add_members.php sql injection
A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-2333
CodeAstro Membership Management System 1.0 is affected by CVE-2024-2333 due to an SQL injection in the /add_members.php file where manipulation of the fullname parameter enables remote exploitation. Multiple sources (NVD, Red Hat, CVE lists, and third-party advisories) confirm the issue and publi...
CVE-2024-2333 CodeAstro Membership Management System add_members.php sql injection
A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CodeAstro Membership Management System Security Vulnerability
CodeAstro Membership Management System is a membership management system from CodeAstro. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from a parameter fullname in the file /addmembers.php that can lead to SQL injection...
PT-2024-19811 · Unknown · Codeastro Membership Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem is related to an unknown function in the file /add members.php, where the manipulation ...
CVE-2024-1987
The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-1987 WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-1987
CVE-2024-1987 — WP-Members Membership Plugin (WordPress) is a stored XSS vulnerability in the plugin’s shortcode attributes, affecting all versions up to 3.4.9.1. The root cause is insufficient input sanitization and output escaping on user-supplied attributes, allowing authenticated attackers wi...
WordPress Plugin WP-Membership Plugin Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
[SECURITY] Fedora 40 Update: voms-api-java-3.3.2-16.fc40
The Virtual Organization Membership Service VOMS is an attribute authority which serves as central repository for VO user authorization information, providing support for sorting users into group hierarchies, keeping track of their roles and other attributes in order to issue trusted attribute...
WP-Members Membership Plugin < 3.4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Description The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.9.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2024-24761
Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...
CVE-2024-24761
Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...
Design/Logic Flaw
Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...
CVE-2024-24761
CVE-2024-24761 affects Galette (membership management app). Public pages were by default restricted to admins/staff in versions 1.0.0–1.0.1; configuration allowed restricting to up-to-date members or everyone. Version 1.0.2 fixes this access-control issue. Connected sources confirm the affected r...
CVE-2024-24761 Galette public pages accessibility restriction
Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...
CVE-2024-24761 Galette public pages accessibility restriction
Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...