618 matches found
PT-2023-26058 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.5 Description: The issue is a SQL injection vulnerability. It can be exploited via the id parameter at the "/Ant Suxin.php" API endpoint. Recommendations: For SEMCMS version 1.5, as a temporary workaround, consider restrictin...
PT-2023-26507 · Unknown · Phpscriptpoint Jobseeker
Name of the Vulnerable Software and Affected Versions: phpscriptpoint JobSeeker version 1.5 Description: A problematic vulnerability was found in the /search-result.php file, where the manipulation of the kw, lc, ct, cp, p arguments leads to cross-site scripting. The attack can be launched...
JobSeeker 跨站脚本漏洞
phpscriptpoint JobSeeker is a responsive job search PHP script by phpscriptpoint. A cross-site scripting vulnerability exists in JobSeeker version 1.5, which stems from a cross-site scripting XSS vulnerability in the parameter kw/lc/ct/cp/p...
PT-2023-12344 · Ibm · Ibm Sterling Connect:Direct For Unix
Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct for UNIX version 1.5 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM...
WordPress Elementor BEMAX Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Software Elementor BEMAX Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f4c1a4c9489c Credits Rafie Muhammad Patchstack Required...
CVE-2023-2562
The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refreshmetabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post...
CVE-2023-3541
A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /authorposts.php. The manipulation of the argument author with the input g6g12alert1o8sdm leads to cross site scripting. The attack can be...
PT-2023-25214 · Thinutech · Thinucms
Name of the Vulnerable Software and Affected Versions: ThinuTech ThinuCMS version 1.5 Description: A vulnerability has been found in an unknown functionality of the file /author posts.php. The manipulation of the argument author with the input g6g12alert1o8sdm leads to cross site scripting. The...
CVE-2021-4403
The Remove Schema plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the validate function. This makes it possible for unauthenticated attackers to modify the plugins settings via a forged...
CVE-2021-4403 Remove Schema <= 1.5 - Cross-Site Request Forgery Bypass
The Remove Schema plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the validate function. This makes it possible for unauthenticated attackers to modify the plugins settings via a forged...
WordPress Plugin Remove Schema 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2023-34254
The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. I...
Design/Logic Flaw
The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. I...
PrestaShop SQL注入漏洞
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. A security vulnerability exists in PrestaShop Module City Autocomplete, which stems from the presence of a SQL...
SEMCMS SQL Injection Vulnerability (CNVD-2023-41864)
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 1.5, which originates from the lack of validation of external input SQL statements in AntRponse.php. An attacker can exploit this vulnerability to...
CVE-2022-47134
Cross-Site Request Forgery CSRF vulnerability in Bill Erickson Gallery Metabox plugin = 1.5 versions...
WordPress Plugin Gallery Metabox 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2023-31707
SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...
PT-2023-23426 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.5 Description: The issue is related to SQL Injection via the Ant Rponse.php file. Recommendations: For SEMCMS version 1.5, update to a version that fixes the SQL Injection issue in Ant Rponse.php, however, at the moment, ther...
SEMCMS SQL注入漏洞
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 1.5, which originates from the lack of validation of external input SQL statements in AntRponse.php. An attacker can exploit this vulnerability to...