Lucene search
+L

115 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•0 views

CVE-2024-31233: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1...

8.5CVSS5.8AI score0.00523EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•0 views

CVE-2024-31234: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2...

8.5CVSS5.8AI score0.00499EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/04/06 12:00 a.m.•25 views

Rehub < 19.6.2 - Unauthenticated Local File Inclusion

Description The Rehub theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 19.6.1. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can ...

9CVSS8.6AI score0.00593EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/04/06 12:00 a.m.•18 views

Rehub < 19.6.2 - Authenticated (Subscriber+) SQL Injection

Description The Rehub theme for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with...

8.5CVSS7.5AI score0.00523EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/04/06 12:00 a.m.•16 views

REHub Framework < 19.6.2 - Authenticated (Subscriber+) SQL Injection

Description The REHub Framework plugin for WordPress is vulnerable to SQL Injection in versions prior to 19.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with...

8.5CVSS7.5AI score0.00499EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/04/06 12:00 a.m.•17 views

Rehub < 19.6.2 - Authenticated (Editor+) Local File Inclusion

Description The Rehub theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 19.6.1. This makes it possible for authenticated attackers, with editor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any...

8CVSS7.9AI score0.0057EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/04/03 5:22 a.m.•8 views

WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin REHub Framework versions 19.6.2...

8.5CVSS8.1AI score0.00499EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/03 5:19 a.m.•10 views

WordPress Rehub theme <= 19.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

8.5CVSS8.1AI score0.00523EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/03 5:15 a.m.•9 views

WordPress Rehub theme <= 19.6.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

8CVSS7AI score0.0057EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/03 5:13 a.m.•12 views

WordPress Rehub theme <= 19.6.1 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

9CVSS7AI score0.00593EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/03 12:00 a.m.•16 views

WordPress REHub Framework Plugin < 19.6.2 is vulnerable to SQL Injection

Software REHub Framework Type Plugin Vulnerable versions 19.6.2 Fixed in 19.6.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31234 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 2625ebbfb885 Credits Rafie Muhammad Patchstack Required privilege...

8.5CVSS6.8AI score0.00499EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/04/03 12:00 a.m.•19 views

WordPress Rehub Theme <= 19.6.1 is vulnerable to SQL Injection

Software Rehub Type Theme Vulnerable versions = 19.6.1 Fixed in 19.6.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31233 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 924903c98061 Credits Rafie Muhammad Patchstack Required privilege Subscriber...

8.5CVSS6.8AI score0.00523EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2024/04/03 12:00 a.m.•7 views

VulnCheck KEV: CVE-2024-31231

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Sizam Design Rehub allows PHP Local File Inclusion.This issue affects Rehub: from n/a through 19.6.1...

9CVSS7.3AI score0.00593EPSS
SaveIn wildExploits0References2
Patchstack
Patchstack
•added 2024/04/03 12:00 a.m.•20 views

WordPress Rehub Theme <= 19.6.1 is vulnerable to Local File Inclusion

Software Rehub Type Theme Vulnerable versions = 19.6.1 Fixed in 19.6.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-31231 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 189370c86e72 Credits Rafie Muhammad Patchstack Required privilege...

9CVSS6.8AI score0.00593EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/04/03 12:00 a.m.•13 views

WordPress Rehub Theme <= 19.6.1 is vulnerable to Local File Inclusion

Software Rehub Type Theme Vulnerable versions = 19.6.1 Fixed in 19.6.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-31232 Patch priority Low CVSS severity Low 8 Developer Claim ownership PSID 8895860d7f84 Credits Rafie Muhammad Patchstack Required privilege Editor...

8CVSS6.8AI score0.0057EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder