15873 matches found
CVE-2024-4820
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/SystemSettings.php?f=updatesettings. The manipulation leads to unrestricted upload. The attack can be...
CVE-2024-4798
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/managebrand.php. The manipulation of the argument id leads to sql injection. The attack may...
CVE-2024-4798
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/managebrand.php. The manipulation of the argument id leads to sql injection. The attack may...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
BIT-SCYLLADB-2023-33972 Privilege escalation from having CREATE access on a keyspace in Scylladb
Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have permissions for that table. This issue...
CVE-2024-4798: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/managebrand.php. The manipulation of the argument id leads to sql injection. The attack may...
CVE-2024-4213: Insecure Storage of Sensitive Information
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order details such as...
CVE-2024-28279: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
Computer Book Store Security Breach
Computer Book Store is an online bookstore system by the individual developer Carmelo Garcia. A security vulnerability exists in Code-projects Computer Book Store version 1.0, which stems from vulnerability to SQL injection attacks...
Online Computer and Laptop Store Code Vulnerabilities
Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A code issue vulnerability exists in Online Computer and Laptop Store version 1.0, which stems from the file /classes/SystemSettings.php?f=updatesettings causing unrestricted uploads...
Git security vulnerabilities
Git is a free, open source distributed version control system. Git has a security vulnerability that stems from the fact that a local clone may end up hard-linking files into the object database of the target repository...
CVE-2024-4606: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BdThemes Ultimate Store Kit Elementor Addons.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 2.0.3...
SQL Injection Vulnerability in Online Computer and Laptop Stores
Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Computer and Laptop Store version 1.0, which stems from a parameter id in the file /admin/maintenance/managebrand.php that can lead to SQL...
CVE-2024-4820: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/SystemSettings.php?f=updatesettings. The manipulation leads to unrestricted upload. The attack can be...
WordPress plugin Ultimate Store Kit Elementor Addons code issue vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...
SUSE SLES12 Security Update : python-pyOpenSSL (SUSE-SU-2024:1626-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1626-1 advisory. - CVE-2018-1000807: Fixed a use-after-free in X509 object handling bsc1111635 - CVE-2018-1000808: Fixed a use-after-free in PKCS 12...
CVE-2024-28279
The Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection via the book.php?bookisbn= endpoint. This flaw allows an attacker to remotely manipulate the endpoint due to improper neutralization of special elements used in an SQL command. A published proof-of-concept was identi...
