CVE-2020-25005

Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code...

CVE-2020-25004

Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code...

CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

CVE-2019-20089

GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMFSeekToSamples in GPMFparse.c for the size calculation...

CVE-2006-4996

Unspecified vulnerability in JoomlaLib comjoomlalib before 1.2.2 for Joomla! allows remote attackers to have an unknown impact, related to "Joomla globals hacked by script kiddies."...

CVE-2004-2234

Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators...

CVE-2008-7190

Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possibly cross-site scripting XSS...

WordPress WP Podcasts Manager plugin <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by ch4r0n in WordPress Plugin WP Podcasts Manager versions = 1.3...

CVE-2025-45947

An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component...

[SECURITY] Fedora 41 Update: rust-idna_adapter-1.2.0-1.fc41

Back end adapter for idna...

Denkovi DAEnetIP4 METO 安全漏洞

Denkovi DAEnetIP4 METO is a multifunctional 10/100 Mb Ethernet device IP controller from Denkovi for management and control. A security vulnerability exists in Denkovi DAEnetIP4 METO version 1.25, which stems from improper session management in the /loginok.htm endpoint, and could lead to a sessi...

CVE-2025-31353

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateOpcSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from a...

CVE-2025-32482 WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in quanganhdo Custom Smilies custom-smilies allows Stored XSS.This issue affects Custom Smilies: from n/a through = 1.2...

CVE-2025-31827

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in vlad.olaru Fonto fonto allows Path Traversal.This issue affects Fonto: from n/a through = 1.2.2...

CVE-2025-31788

CVE-2025-31788 affects the AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin family. The issue is an Insertion of Sensitive Information into Log File, enabling unauthenticated exposure of embedded data via log contents. Affected versions are reported as up to 1.2 (n/a to 1.2). ...

CVE-2025-25766

An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...

CVE-2025-23784

CVE-2025-23784 affects the WordPress plugin Contact Form 7 Round Robin Lead Distribution (vulnerable from n/a through 1.2.1). The issue is an SQL Injection due to improper neutralization of special elements in SQL commands, enabling attacker-controlled input to interfere with database queries. Th...

CVE-2025-23758

CVE-2025-23758 affects the WordPress pootle-button plugin (NotFound Pootle button); vulnerability is a Reflected XSS in the plugin’s input handling, affecting versions up to 1.2.0. Exploitation details are not provided beyond the vulnerability type. Remediation: upgrade to version 1.2.0 or later ...

WordPress plugin UltraLight 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Content Mirror plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Content Mirror versions = 1.2...