4139 matches found
CVE-2018-0165: Missing Release of Resource after Effective Lifetime
A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service DoS condition, aka a Memory Leak. The vulnerability ...
File Upload Vulnerability in Merchant Alliance Membership Spending Management System
Merchant Alliance Consumer Management System is a management software for professional membership management and merchant settlement for heterogeneous merchant alliances. A file upload vulnerability exists in the Merchant Alliance Membership and Consumption Management System. The attacker does no...
donnahay.com.au XSS vulnerability
Open Bug Bounty ID: OBB-579950 Description| Value ---|--- Affected Website:| donnahay.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Shipt: Any user can completely delete their own account without authorization and/or going through any kind of membership cancellation protocol.
A security researcher identified an endpoint that allowed Shipt Members to delete their own account by intercepting an HTTP request, changing the HTTP method to DELETE, and forwarding the request, bypassing the normal membership cancellation protocol. This endpoint did not allow for modifying oth...
CVE-2018-7206
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...
Design/Logic Flaw
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...
CVE-2018-7206
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...
Ultimate Member <= 2.0 - Multiple XSS
The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Multiple XSS security vulnerability...
MoinMoin 1.9 < 1.9.5 ACL Security Vulnerability - Windows
MoinMoin does not properly handle group names that contain virtual group names such as SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla! JEXTN Membership SQL Injection Vulnerability
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JEXTN Membership component is used in a set of e-commerce components. A SQL injection vulnerability exists in version 3.1.0 of...
CVE-2018-6577
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
Sql injection
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
CVE-2018-6577
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
CVE-2018-6577
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
CVE-2018-6577
CVE-2018-6577 affects Joomla! installations using the JEXTN Membership 3.1.0 component. The vulnerability is a SQL injection caused by unsanitized input supplied through the usr_plan parameter in requests of the form view=myplans&task=myplans.usersubscriptions. Connected sources (CNVD/NVD) confir...
Joomla JEXTN Membership 3.1.0 Component - usr_plan SQL Injection Exploit
Exploit for php platform in category web applications 0day.today 2018-04-11...
PT-2018-17641
Name of the Vulnerable Software and Affected Versions JEXTN Membership version 3.1.0 Description A SQL Injection issue exists in the JEXTN Membership component for Joomla. This issue can be exploited via the usr plan parameter in a "view=myplans&task=myplans.usersubscriptions" request...
CVE-2018-6577: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...
