CVE-2022-3912 User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example...

CVE-2022-3912

CVE-2022-3912 affects the WordPress plugin User Registration (versions prior to 2.2.4.1). The root cause is that the plugin does not properly restrict files uploaded via an AJAX action available to both unauthenticated and authenticated users, enabling unauthenticated users to upload PHP files. I...

WordPress plugin User Registration 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

The vulnerability of the implementation of the Collectors registration mechanism in the security device’s functions for identifying and responding to security threats at end points FortiEDR allows a perpetrator to remove a device from the Collectors list and cause a service failure.

The vulnerability of the Collectors registration mechanism implementation in the security, threat detection, and response system for FortiEDR endpoints is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability allows an attacker to remove a device from the...

CVE-2022-45758

SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...

The vulnerability of the NDES registration service for Microsoft Windows operating systems allows a hacker to circumvent existing security restrictions and expose the protected information.

The vulnerability of the Network Device Registration Service NDES of Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and disclose sensitive information...

PT-2022-36042 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A memory leak issue was discovered when a device registration fails. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.11 and is fixe...

Entity Registration - Moderately critical - Access bypass - SA-CONTRIB-2022-063

This module enables you to create registration entities related to nodes. The module doesn't sufficiently restrict update access to a user's own registrations. This vulnerability is mitigated by the fact that an attacker must have the "update own registration type" permission...

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

Cross site scripting

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 is affected by multiple stored XSS vulnerabilities in the registration and login forms. The XSS can be triggered via the firstname and lastname parameters. Affected component is the user input handling for registration/login; root cause d...

User Management System 跨站脚本漏洞

User Management System is a Php User Management System using Stored Procedures by Anuj Kumar Personal Developer. A security vulnerability exists in Phpgurukul User Registration & User Management System version v3.0, which can be exploited by an attacker to conduct a cross-site scripting attack vi...

CVE-2022-4232

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

CVE-2022-4232

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

CVE-2022-4232

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

CVE-2022-4233

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

CVE-2022-4233

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

Cross site scripting

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...