6064 matches found
CVE-2021-4388: Missing Authorization
The Opal Estate plugin for WordPress is vulnerable to featured property modifications in versions up to, and including, 1.6.11. This is due to missing capability checks on the opalestatesetfeatureproperty and opalestateremovefeatureproperty functions. This makes it possible for unauthenticated...
WordPress Plugin WP Opal Estate 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2023-12500 · WordPress · Opal Estate
Name of the Vulnerable Software and Affected Versions: Opal Estate plugin for WordPress versions up to, and including, 1.6.11 Description: The issue is related to missing capability checks on the opalestate set feature property and opalestate remove feature property functions. This allows...
Vacation Rental Script 1.8 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Chrome v8::internal::Object::SetPropertyWithAccessor Type Confusion
Chrome: Type confusion in v8::internal::Object::SetPropertyWithAccessor VULNERABILITY DETAILS When SetSuperProperty can't find the requested property in the holder, it performs an OWN lookup on the receiver. If the receiver has a property interceptor installed, the function invokes the...
CVE-2023-34735
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
CVE-2023-34735
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
Sql injection
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
DOOR Property Cloud Platform Management Center SQL注入漏洞
DOOR Property Cloud Platform Management Center is a property cloud platform management center of China DOOR Corporation. A security vulnerability exists in DOOR Property Cloud Platform Management Center version 1.0, which originates from an SQL injection vulnerability...
CVE-2023-34735
CVE-2023-34735 affects Property Cloud Platform Management Center 1.0. The connected documents confirm an error-based SQL injection vulnerability in this product/version, with NVD listing a 9.8 (CRITICAL ) base score and network-only exploitability. Root cause is SQL injection in the affected comp...
CVE-2023-34735
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
PT-2023-24990 · Unknown · Property Cloud Platform Management Center
Name of the Vulnerable Software and Affected Versions: Property Cloud Platform Management Center version 1.0 Description: The issue is related to error-based SQL injection. Recommendations: For Property Cloud Platform Management Center version 1.0, at the moment, there is no information about a...
User Registration < 3.0.2 - Subscriber+ PHP Object Injection
The plugin does not properly sanitize the 'profile-pic-url' parameter, leading to a potential PHP Object Injection. This vulnerability stems from the deserialization of untrusted input, potentially enabling a malicious user with subscriber-level permissions to inject a PHP Object. The issue may...
CVE-2023-34735: Improper Neutralization of Special Elements used in an SQL Command
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
CVE-2023-34735
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
Chrome Internal JavaScript Object Access Via Origin Trials
Chrome: Internal JavaScript object access via Origin Trials VULNERABILITY DETAILS 1. JSObject::DefineAccessor doesn't ensure that the receiver object is in a valid state before creating an accessor property. This allows callers to extend non-extensible objects and reconfigure non-configurable...
Supsystic Popup < 1.10.19 - Prototype Pollution
The plugin has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype. PoC 1 Create a pop-up that is set to load on any page 2 Go to http://example.com/?protopoc=polluted 3 Open browser console 4 Type poc and see polluted as the resul...
CVE-2023-25194
A flaw was found in Apache Kafka Connect's REST API that permits configuration of SASL property by an authenticated operator, which could allow connection to a malicious LDAP server and subsequent deserialization of malicious content. This issue could allow an authenticated attacker to cause a...
