6 matches found
CVE-2024-47335
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through = 2.13.11...
WordPress plugin Bit Form SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
WordPress Bit Form – Contact Form Plugin Plugin <= 2.13.11 is vulnerable to SQL Injection
Software Bit Form – Contact Form Plugin Type Plugin Vulnerable versions = 2.13.11 Fixed in 2.13.12 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47335 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 1912ac90b310 Credits Certus Cybersecurity Required...
CVE-2019-3986
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter...
CVE-2019-3983
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections...
CVE-2019-3987
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...