Lucene search
+L

2979 matches found

Cvelist
Cvelist
added 2024/02/27 4:31 p.m.31 views

CVE-2024-1924 CodeAstro Membership Management System get_membership_amount.php sql injection

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /getmembershipamount.php. The manipulation of the argument membershipTypeId leads to sql injection. It is possible to initiate the attack remotely...

6.5CVSS7AI score0.00475EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/02/27 12:0 a.m.9 views

PT-2024-18426 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem affects the /get membership amount.php file, where the manipulation of the...

6.5CVSS8AI score0.00475EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/02/27 12:0 a.m.7 views

CodeAstro Membership Management System SQL Injection Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from an unknown section in getmembershipmount.php, and can be exploited to perform SQL injection vi...

6.5CVSS8AI score0.00475EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2024/02/26 12:0 a.m.18 views

WordPress Restrict User Access – Membership Plugin with Force Plugin <= 2.5 is vulnerable to Sensitive Data Exposure

Software Restrict User Access – Membership Plugin with Force Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0687 Patch priority Low CVSS severity Low 5.3 Developer DEV Institute PSID 388810d84a13...

5.3CVSS6.5AI score0.00546EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2024/02/26 12:0 a.m.22 views

Restrict User Access – Ultimate Membership & Content Protection < 2.6 - Information Exposure

Description The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API...

5.3CVSS6.5AI score0.00546EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/02/23 3:15 p.m.27 views

CVE-2024-1819

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

7.2CVSS4.8AI score0.00672EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/23 3:15 p.m.5 views

CVE-2024-1819

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

7.2CVSS5.4AI score0.00672EPSS
SaveExploits1References3
NVD
NVD
added 2024/02/23 3:15 p.m.24 views

CVE-2024-1818

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

7.2CVSS4.8AI score0.00672EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/23 3:15 p.m.5 views

CVE-2024-1818

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

7.2CVSS5.4AI score0.00672EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/23 3:15 p.m.22 views

Out-of-bounds

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

5.8CVSS7.1AI score0.00672EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/23 3:15 p.m.18 views

Design/Logic Flaw

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

5.8CVSS7.2AI score0.00672EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/02/23 2:31 p.m.17 views

CVE-2024-1819 CodeAstro Membership Management System Add Members Tab unrestricted upload

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

5.8CVSS6.9AI score0.00672EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/23 2:31 p.m.107 views

CVE-2024-1819

CodeAstro Membership Management System 1.0 is affected in the Add Members Tab. The issue arises from manipulating the Member Photo argument, enabling unrestricted uploads. The vulnerability can be triggered remotely and has publicly disclosed exploit information. Documentation in connected source...

7.2CVSS4.9AI score0.00672EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/02/23 2:31 p.m.29 views

CVE-2024-1819 CodeAstro Membership Management System Add Members Tab unrestricted upload

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

5.8CVSS5.2AI score0.00672EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/02/23 2:31 p.m.15 views

CVE-2024-1818 CodeAstro Membership Management System Logo unrestricted upload

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

5.8CVSS6.9AI score0.00672EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/23 2:31 p.m.127 views

CVE-2024-1818

CVE-2024-1818 affects CodeAstro Membership Management System 1.0, specifically the Logo Handler’s /uploads/ area. A vulnerability in an unknown function within that directory allows unrestricted file uploads, with remote exploitation and the exploit publicly disclosed. Impact is described as unre...

7.2CVSS4.8AI score0.00672EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.11 views

PT-2024-18334 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue affects the Add Members Tab component, where the manipulation of the Member Photo argument leads to unrestricted upload. This can be initiated remotely. The issu...

7.2CVSS7AI score0.00672EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.6 views

CodeAstro Membership Management System Security Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from a parameter Member Photo in the component Add Members Tab that can lead to unrestricted uploads...

7.2CVSS6.8AI score0.00672EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.9 views

CodeAstro Membership Management System Code Issue Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A code issue vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from the component Logo Handler's file /uploads/ that can lead to unrestricted uploads...

7.2CVSS7AI score0.00672EPSS
SaveExploits1References4
Veracode
Veracode
added 2024/02/21 10:14 a.m.19 views

Incorrect Authorization

liferay portal is vulnerable to Incorrect Authorization. The vulnerability is caused due to not restricting membership of a child site when the Limit membership to members of the parent site option is enabled. This allows remote authenticated users to add users who are not a member of the parent...

5.4CVSS6.4AI score0.00333EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder