EUVD-2020-13135

Malware in sbrugna...

EUVD-2023-12600

Malicious code in bioql PyPI...

EUVD-2021-28110

Malicious code in bioql PyPI...

WordPress Easy restaurant menu manager cross-site scripting vulnerability

WordPress Easy restaurant menu manager is a WordPress plugin for managing restaurant menus , the main features include uploading and editing restaurant menus online and embedding them into the website through short codes or links. A cross-site scripting vulnerability exists in WordPress Easy...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

CVE-2023-0555

The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those...

Authorization

The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those...

PT-2023-16359 · WordPress · Quick Restaurant Menu

Name of the Vulnerable Software and Affected Versions: The Quick Restaurant Menu plugin for WordPress versions up to, and including, 2.0.2 Description: The issue allows authenticated attackers with subscriber-level permissions and above to bypass authorization and invoke actions intended for...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

Sql injection

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2021-40956

CVE-2021-40956 affects LaiKetui v3.5.0, with SQL injection via the menu management function in the background that can expose sensitive data. This corresponds to multiple sources confirming SQL injection in LaikeTui v3.5.0. No explicit exploitation details or patched version are provided in the c...

LaikeTui SQL injection vulnerability

LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. A security vulnerability exists in LaikeTui v3.5.0. Attackers use this vulnerability through the menu management function in the background of the SQL injection attack , in order to obtain sensitive...

PT-2022-11346

Name of the Vulnerable Software and Affected Versions LaiKetui version 3.5.0 Description The issue concerns a SQL injection in the background of LaiKetui through the menu management function, allowing sensitive data to be obtained. Recommendations For LaiKetui version 3.5.0, as a temporary...

CVE-2021-40956: Improper Neutralization of Special Elements used in an SQL Command

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

SQL Injection Vulnerability in Fast Food Ordering System

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/menus/managemenu.php?id= The page lacks validation for external input SQL statements, which...