Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-11152

Malware in sbrugna...

6.5CVSS6.5AI score0.01114EPSS
Exploits2References7
CNNVD
CNNVD
added 2025/06/04 12:0 a.m.3 views

CodeAstro Real Estate Management System 注入漏洞

CodeAstro Real Estate Management System is a real estate management system from CodeAstro. An injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter ID in the file...

8.8CVSS6.8AI score0.00398EPSS
Exploits1References5
NVD
NVD
added 2021/04/22 9:15 p.m.11 views

CVE-2021-24238

The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the propertyid parameter...

6.5CVSS0.01114EPSS
Exploits2References4
Prion
Prion
added 2021/04/22 9:15 p.m.18 views

Design/Logic Flaw

The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the propertyid parameter...

4CVSS6.4AI score0.01114EPSS
Exploits2References4Affected Software2
Cvelist
Cvelist
added 2021/04/22 9:0 p.m.13 views

CVE-2021-24238 Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR

The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the propertyid parameter...

6.6AI score0.01114EPSS
Exploits2References4
WPVulnDB
WPVulnDB
added 2021/03/31 12:0 a.m.18 views

Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR

The plugin, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the propertyid parameter. PoC GET...

4CVSS4.5AI score0.01114EPSS
Exploits2References3Affected Software2
Rows per page
Query Builder