CVE-2023-3396

CVE-2023-3396 affects Campcodes Retro Cellphone Online Store 1.0, specifically an unknown functionality in /admin/index.php. The underlying issue is a SQL injection caused by manipulating the username/password parameters, described as exploitable remotely. Multiple sources confirm an in-the-wild ...

CVE-2023-3396 Campcodes Retro Cellphone Online Store index.php sql injection

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be launched...

CVE-2023-3396 Campcodes Retro Cellphone Online Store index.php sql injection

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be launched...

CVE-2023-3396: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be launched...

Campcodes Retro Cellphone Online Store SQL Injection Vulnerability

Campcodes Retro Cellphone Online Store is a retro cellphone online store by Campcodes. A SQL injection vulnerability exists in Campcodes Retro Cellphone Online Store version 1.0, which stems from the presence of unknown functionality in admin/index.php, which leads to sql injection via the...

pet-super-store.com Cross Site Scripting vulnerability OBB-3465610

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Missing store revert in case of swap error can lead to loss of funds

Lines of code Vulnerability details Impact The module is expected to have no state changes in case a swap failed, and continue to the conversion phase. It was implemented by swallowing the error with a log and continuing with the flow erc20 conversion, etc. This is the relevant code section:...

Pre-defined limit is different from the spec.

Lines of code Vulnerability details Impact In the spec, the pre-defined limit of ETH is 0.01 ETHs. But the actual limit in the code is not 0.01 ETH which could result in misleading. Proof of Concept In the spec, it said that the pre-defined limit of ETH is 0.01 ETHs For risk management purposes, ...

CVE-2023-27618

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in AGILELOGIX Store Locator WordPress plugin = 1.4.9 versions...

CVE-2023-27618

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in AGILELOGIX Store Locator WordPress plugin = 1.4.9 versions...

Cross site scripting

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in AGILELOGIX Store Locator WordPress plugin = 1.4.9 versions...

CVE-2023-27618

CVE-2023-27618 affects Store Locator WordPress plugin (AGILE STORE LOCATOR)

CVE-2023-27618: Improper Neutralization of Input During Web Page Generation

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in AGILELOGIX Store Locator WordPress plugin = 1.4.9 versions...

Pre-configure the Store-URL in the “Citrix Workspace App” for MAC

...

PT-2023-21256

Name of the Vulnerable Software and Affected Versions AGILELOGIX Store Locator WordPress plugin versions 1.4.9 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with editor or higher permissions. This type of vulnerability allows an...

WordPress Plugin Store Locator – WordPress XSS Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

bikers-store.fr Cross Site Scripting vulnerability OBB-3453752

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Overcoming Challenges in Delivering Machine Learning Models from Research to Production

So, you’ve finished your research. You developed a machine learning ML model, tested, and validated it and you’re now ready to start development, and then push the model to production. The hard work -- the research -- is finally behind you. Or is it? Understanding the Challenges in Machine Learni...

SaaS in the Real World: How Global Food Chains Can Secure Their Digital Dish

The Quick Serve Restaurant QSR industry is built on consistency and shared resources. National chains like McDonald's and regional ones like Cracker Barrel grow faster by reusing the same business model, decor, and menu, with little change from one location to the next. QSR technology stacks mirr...

Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign

Individuals in the Pakistan region have been targeted using two rogue Android apps available on the Google Play Store as part of a new targeted campaign. Cybersecurity firm Cyfirma attributed the campaign with moderate confidence to a threat actor known as DoNot Team, which is also tracked as...