Simple Membership System SQL Injection Vulnerability

Simple Membership System is a simple membership system. A SQL injection vulnerability exists in Simple Membership System v1.0, which stems from the lack of validation of the clubid parameter of the file clubeditquery.php against an externally entered SQL statement. An attacker can exploit this...

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4846

CVE-2023-4846 affects SourceCodester Simple Membership System 1.0. The vulnerability is a SQL injection in the file delete_member.php, caused by manipulating the mem_id argument. It can be exploited remotely and has been publicly disclosed. Multiple sources describe this as a critical issue with ...

CVE-2023-4846 SourceCodester Simple Membership System delete_member.php sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4845

SourceCodester Simple Membership System 1.0 contains a SQL injection in account_edit_query.php via the admin_id parameter. Exploitation can be remote and public disclosures exist (CVE-2023-4845, VDB-239254). Root cause is unsafe handling of input in account_edit_query.php; impact details are prov...

Simple Membership System SQL Injection Vulnerability

Simple Membership System is a simple membership system for Razormist individual developers. A SQL injection vulnerability exists in SourceCodester Simple Membership System version 1.0, which stems from an unknown section of the file accounteditquery.php, which leads to sql injection via the...

PT-2023-30854 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple Membership System. The issue affects the file account edit query.php, where the manipulation of the admin id...

CVE-2023-4844

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file clubeditquery.php. The manipulation of the argument clubid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file clubeditquery.php. The manipulation of the argument clubid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2023-4844 SourceCodester Simple Membership System club_edit_query.php sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file clubeditquery.php. The manipulation of the argument clubid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2023-4844

CVE-2023-4844 affects SourceCodester Simple Membership System 1.0 via an SQL injection in the file club_edit_query.php caused by unsanitized club_id input. The issue can be exploited remotely and exploits have been publicly disclosed. Root cause: inadequate input validation for club_id. Impact: d...

PT-2023-30853 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue was found in the file club edit query.php, where the manipulation of the club id argument leads to SQL injection. This can be initiated remotely. The issue has...

Cross site scripting

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the listtype parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web...

CVE-2023-4719

The CVE-2023-4719 entry concerns the WordPress Simple Membership plugin. A Reflected Cross‑Site Scripting (XSS) flaw exists in versions up to 4.3.5 via the list_type parameter, caused by insufficient input sanitization and output escaping. Unauthenticated attackers could inject scripts into pages...

CVE-2023-4719 Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the listtype parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web...

WordPress Simple Membership Plugin <= 4.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Simple Membership Type Plugin Vulnerable versions = 4.3.5 Fixed in 4.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4719 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2b9d405c3f7b Credits FearZzZz Require...

WordPress plugin Simple Membership cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2022-4469

The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4469

The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...