PT-2023-9890 · Unknown · Lierdakil Click-Reminder

Name of the Vulnerable Software and Affected Versions: lierdakil click-reminder affected versions not specified Description: A critical issue was found in lierdakil click-reminder, affecting the function db query of the file src/backend/include/BaseAction.php. This issue leads to SQL injection. T...

simplesamlphp-module-openidprovider Cross Site Scripting vulnerability

A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads to cross site scripting...

CVE-2010-10008

Summary: CVE-2010-10008 affects the simplesamlphp-module-openidprovider component (versions up to 0.8.x). The issue is a cross-site scripting flaw in the templates/trust.tpl.php file triggered by manipulation of the StateID argument. Exploitation can be remote. The publicly documented remediation...

CVE-2015-10052

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the function bearbeiten/login. The manipulation leads to open redirect. It is possible to initiate the attack remotely. The patch is named...

CVE-2023-23595

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported...

CVE-2023-23595

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported...

CVE-2023-23595

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported...

CVE-2023-23595

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported...

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This affects the function zipgo of the file classes/options/zip.php. The manipulation of the argument archive leads to cross site scripting. It is possible to initiate the attack remotely. Th...

CVE-2021-4312

CVE-2021-4312 affects Th3-822 Rapidleech, specifically the zip_go function in classes/options/zip.php. The vulnerability arises from manipulating the archive argument, enabling cross-site scripting that can be triggered remotely. A patch named 885a87ea4ee5e14fa95801eca255604fb2e138c6 exists, and ...

PT-2023-12416 · Unknown · Th3-822 Rapidleech

Name of the Vulnerable Software and Affected Versions: Th3-822 Rapidleech affected versions not specified Description: A problematic vulnerability has been found in Th3-822 Rapidleech, affecting the function zip go of the file classes/options/zip.php. The manipulation of the argument archive lead...

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the function selecttransferstatusdesc of the file lib/common.rb. The manipulation leads to sql injection. The name of the patch is 91097e26a6c84d3208a351afaa52e0f62e5853ef...

CVE-2016-15012 forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to...

CVE-2014-125061 peel filebroker common.rb select_transfer_status_desc sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the function selecttransferstatusdesc of the file lib/common.rb. The manipulation leads to sql injection. The name of the patch is 91097e26a6c84d3208a351afaa52e0f62e5853ef...

CVE-2014-125061

The CVE-2014-125061 issue affects peel filebroker. The vulnerability targets the function select_transfer_status_desc in lib/common.rb, where manipulation enables SQL injection. A patch named 91097e26a6c84d3208a351afaa52e0f62e5853ef exists to fix the issue, and the vulnerability identifier is VDB...

CVE-2014-125049 typcn Blogile server.js getNav sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in typcn Blogile. Affected is the function getNav of the file server.js. The manipulation of the argument query leads to sql injection. The name of the patch is cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d. It is...

django-ucamlookup Cross-site Scripting vulnerability

A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading ...

CVE-2023-22464

ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by a...

GHSA-6M7C-45FF-3328 FrameworkUserBundle Generates Error Message Containing Sensitive Information

A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through error message. Upgrading to...