1190 matches found
CVE-2023-7188
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument Mpwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be...
Sql injection
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument Mpwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be...
CVE-2023-7188 Shipping 100 Fahuo100 login.php sql injection
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument Mpwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be...
CVE-2023-7188 Shipping 100 Fahuo100 login.php sql injection
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument Mpwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be...
CVE-2023-7188
CVE-2023-7188 affects Shipping 100 Fahuo100 up to version 1.1. The vulnerability is in an unknown function in the file member/login.php where manipulation of the argument M_pwd leads to an SQL injection . Reported impact is high across confidentiality, integrity, and availability. Multiple connec...
PT-2023-32932 · Unknown · Shipping 100 Fahuo100
Name of the Vulnerable Software and Affected Versions: Shipping 100 Fahuo100 versions up to 1.1 Description: A critical vulnerability has been found in Shipping 100 Fahuo100. The issue affects an unknown function of the file member/login.php. The manipulation of the argument M pwd leads to sql...
Shipping 100 Fahuo100 Security Breach
100% SPEEDLAB Shipping 100 Fahuo100 is a courier shipping software from 100% SPEEDLAB. A security vulnerability exists in Shipping 100 Fahuo100 version 1.1 and prior versions, which stems from a problem with an unknown function in member/login.php...
WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin <= 4.2.1 is vulnerable to Privilege Escalation
Software WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.3.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51546 Patch priority Medium CVSS severity Medium...
WordPress WooCommerce Shipping Per Product Plugin <= 2.5.4 is vulnerable to Broken Access Control
Software WooCommerce Shipping Per Product Type Plugin Vulnerable versions = 2.5.4 Fixed in 2.5.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51499 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 08c4c7d68a1f Credits Rafie...
WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Broken Access Control
Software WooCommerce Canada Post Shipping Type Plugin Vulnerable versions = 2.8.3 Fixed in 2.8.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51498 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 5ac6b8eb5c23 Credits Rafie...
CVE-2023-32799
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3...
CVE-2023-32799
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3...
Authorization
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3...
CVE-2023-32799
CVE-2023-32799 affects the WordPress WooCommerce Ship to Multiple Addresses plugin (
PT-2023-24032 · Woocommerce · Woocommerce Shipping Multiple Addresses
Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses versions 3.8.3 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For...
CVE-2023-47789
Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...
CVE-2023-47789
Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...
CVE-2023-47789 WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Post Shipping Method: from n/a through 2.8.3...