CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

Flask Middleware Flask-security Security Vulnerabilities

Flask Middleware Flask-security is a Python-based codebase from the Flask Middleware organization that provides security features for Flask applications. Flask Middleware Flask-security A security vulnerability exists in Flask-Security-Too 5.3.2 and earlier versions that originates from a...

PT-2023-8085

Name of the Vulnerable Software and Affected Versions Flask-Security-Too versions =2.1.0 may impact applications that were previously not affected, as the autocorrect location header configuration was changed to False, making location headers in redirects relative by default. Recommendations For...

CVE-2023-49707

SQLi vulnerability in S5 Register module for Joomla...

Sql injection

SQLi vulnerability in S5 Register module for Joomla...

CVE-2023-49707

CVE-2023-49707 is an SQL injection in the S5 Register Joomla extension. Affected versions: 1.0.0–3.0.0. Root cause is a SQLi in the S5 Register module, with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, critical). Exploitation details are not provided in the documents. No remedia...

CVE-2023-49707 Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0

SQLi vulnerability in S5 Register module for Joomla...

PT-2023-31306

Name of the Vulnerable Software and Affected Versions Joomla S5 Register module affected versions not specified Description The issue is related to a SQL injection vulnerability in the S5 Register module for Joomla. There is no information provided about the estimated number of potentially affect...

Joomla Security Breach

Joomla is an open source, cross-platform content management system CMS developed by Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that stems from a SQL injection vulnerability in the S5 Register module...

CVE-2023-49707: Improper Neutralization of Special Elements used in an SQL Command

SQLi vulnerability in S5 Register module for Joomla...

CVE-2023-6774

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

CVE-2023-6773

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

PT-2023-32773 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /accounts con/register account. The manipulation of th...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from the presence of an unknown function in /accountscon/registeraccount that lead...

PT-2024-14643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the content of the floating point control fpc register of a traced process is modified with the ptrace interface. The new value is tested for validity by temporaril...

PT-2024-14642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the KVM: s390: fix setting of fpc register in the Linux kernel. The kvm arch vcpu ioctl set fpu function allows setting the floating point control fpc register of...

CVE-2023-6652

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of the file /register.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

Sql injection

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of the file /register.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2023-32728

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial Site version 1.0 Description A critical issue was found in the function register of the file /register.php, which leads to SQL injection. The attack can be launched remotely. Recommendations For version 1.0, as a...

CVE-2023-6652: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of the file /register.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...