PT-2022-31818

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A bug was fixed in the ext4 file system, specifically in the es tree search function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

PT-2022-20754

Name of the Vulnerable Software and Affected Versions ILIAS UserTakeOver plugin versions prior to 4.0.1 Description The issue allows an attacker to list all users via the search function. Recommendations For versions prior to 4.0.1, update to version 4.0.1 or later to resolve the issue...

CVE-2022-31478: Undefined Security Weakness

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

ILIAS plugin UserTakeOver 安全漏洞

ILIAS is an open source learning management system. A security vulnerability exists in the ILIAS plugin UserTakeOver versions prior to 4.0.1. An attacker exploited the vulnerability to list all users via the search function...

Cross-site Scripting (XSS) - Reflected

Description I find Relected XSS in search function. Proof of Concept 1.Login with admin or teacher account 2.Access this url:...

Cross-site Scripting (XSS) in Search Fuction with filter

Description The is an XSS could be trigger via search function in number filter. Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of...

WDJA SQL Injection Vulnerability

Wdja is a Php-based content management system from the WDJA team. v2.1 of WDJA is vulnerable to SQL injection, which stems from the impact of a SQL injection vulnerability in the front-end search function. An attacker can exploit the vulnerability for SQL injection...

CVE-2021-42185

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

CVE-2021-42185

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

Sql injection

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

CVE-2021-42185

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

CVE-2021-42185

CVE-2021-42185 affects the PHP-based CMS WDJA v2.1, with a SQL injection in the foreground search function. The issue is documented across multiple sources (NVD entry notes a SQLi vulnerability in the front-end search; Red Hat and CNVD entries corroborate WDJA v2.1 exposure). CVSS data in the NVD...

WordPress Stafflist 3.1.2 SQL Injection

Exploit Title: WordPress Plugin stafflist 3.1.2 - SQL Injection Authenticated Date: 05-02-2022 Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/stafflist/ Version: 3.1.2 Tested on: Firefox Contact me: h at spidersilk.com Vulnerable Code: $w =...

Shopware B2B-Suite SQL Injection Vulnerability (CNVD-2022-82575)

Shopware is a suite of e-commerce software from the German company Shopware.Shopware B2B-Suite 4.4.1 and prior versions are vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements applied to the sort-by parameter of the search function. An authenticat...

CVE-2020-20425

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

Cross site scripting

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

CVE-2020-20425

S-CMS Government Station Building System v5.0 (PHP/MySQL CMS) includes a cross-site scripting (XSS) vulnerability in the search function. The CVE description confirms XSS in this release; connected sources reiterate S-CMS v5.0 as affected and describe the vulnerability class. No root cause detail...

CVE-2020-20425: Improper Neutralization of Input During Web Page Generation

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...