40 matches found
EUVD-2009-4360
Malware in sbrugna...
EUVD-2023-32425
Malicious code in bioql PyPI...
EUVD-2023-56238
Malicious code in bioql PyPI...
EUVD-2023-27772
Malicious code in bioql PyPI...
CVE-2023-28790
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Brett Shumaker Simple Staff List plugin = 2.2.3 versions...
CVE-2023-51526
Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...
CVE-2023-51526
Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...
CVE-2023-51526 WordPress Simple Staff List plugin <= 2.2.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...
CVE-2023-51526 WordPress Simple Staff List plugin <= 2.2.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...
CVE-2023-51526: Missing Authorization
Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...
PT-2024-14180
Name of the Vulnerable Software and Affected Versions Simple Staff List versions 2.2.4 and earlier Description A Missing Authorization issue has been identified. This issue affects the Simple Staff List plugin, allowing potential unauthorized access due to the lack of proper authorization checks...
WordPress plugin Simple Staff List security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
CVE-2023-51813
Cross Site Request Forgery CSRF vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the stafflist parameter in the index.php component...
CVE-2023-51813
Cross Site Request Forgery CSRF vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the stafflist parameter in the index.php component...
PT-2024-14304 · Unknown · Free/Open Source Inventory Management System
Name of the Vulnerable Software and Affected Versions: Free Open-Source Inventory Management System version 1.0 Description: A Cross Site Request Forgery CSRF issue allows a remote attacker to execute arbitrary code via the staff list parameter in the "index.php" component. This enables the...
Free Open-Source Inventory Management System Security Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free Open-Source Inventory Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the Stafflist parameter in...
WordPress Simple Staff List Plugin <= 2.2.4 is vulnerable to Broken Access Control
Software Simple Staff List Type Plugin Vulnerable versions = 2.2.4 Fixed in 2.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51526 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d6f5e64c564c Credits Abdi Pranata Required...
CVE-2023-28790
Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Brett Shumaker Simple Staff List plugin = 2.2.3 versions...
