820 matches found
Codezips Pet Shop Management System SQL注入漏洞
Codezips Pet Shop Management System is a Codezips open source pet store management system . Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the id parameter in the /animalsadd.php file, resulting in SQL injection...
PT-2024-16272 · Unknown · Codezips Pet Shop Management System
Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting the /deleteanimal.php file, where the manipulation of the t1 argument leads to SQL injection. The attack can be initiated...
Codezips Pet Shop Management System SQL注入漏洞
Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the t1 parameter in the /deleteanimal.php file resulting in SQL injection...
Codezips Pet Shop Management System SQL注入漏洞
Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the t1 parameter in the /deletebird.php file resulting in SQL injection...
PT-2024-16276
Name of the Vulnerable Software and Affected Versions Codezips Pet Shop Management System version 1.0 Description A critical issue has been found in the processing of the file /animalsupdate.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotel...
CVE-2024-10426: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /animalsadd.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-10427: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /deleteanimal.php. The manipulation of the argument t1 leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2024-10431: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file /deletebird.php. The manipulation of the argument t1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
pet-insurance.org Cross Site Scripting vulnerability OBB-3946294
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Pet Manager plugin <= 1.4 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Pet Manager versions = 1.4...
CVE-2024-3918
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2024-3918
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2024-3917
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-3918 Pet Manager <= 1.4 - Contributor+ Stored XSS
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2024-3918
The Pet Manager WordPress plugin, in versions 1.4 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain Pet settings. This flaw allows users with high privileges, such as Contributors , to perform XSS attacks. While ...
CVE-2024-3918 Pet Manager <= 1.4 - Contributor+ Stored XSS
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2024-3917 Pet Manager <= 1.4 - Reflected XSS
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-3917 Pet Manager <= 1.4 - Reflected XSS
The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress plugin Pet Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-28375 · WordPress · The Pet Manager
Name of the Vulnerable Software and Affected Versions: The Pet Manager WordPress plugin versions 1.4 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...