101 matches found
PT-2021-6734 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.2 and earlier, 2.4.2-p1 and earlier Magento versions 2.3.7 and earlier Description: The issue is caused by improper input validation within the CMS page scheduled update feature. An authenticated attacker with...
PT-2021-6292 · Adobe · Magento Commerce
Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier Magento Commerce versions 2.4.2-p1 and earlier Magento Commerce versions 2.3.7 and earlier Description: The issue is caused by improper input validation, allowing an attacker with admin privileges t...
CVE-2021-36035
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution...
mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...
WordPress wp-google-map-plugin plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-map-plugin plugin is a Google Maps plugin used in it. A cross-site scripting vulnerability exists in WordPres...
Fedora 29 : python-markdown2 (2019-095c760511)
python-markdown2 2.3.7 - pull 306 Drop support for legacy Python versions - pull 307 Fix syntax highlighting test cases that depend on Pygments output - pull 308 Add support for Python 3.7 - pull 304 Add Wheel package support - pull 312 Fix tocdepth initialization regression - pull 315 XSS fix No...
DEBIAN-CVE-2016-6188
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
My Little Forum has multiple vulnerabilities
my little forum is a set of Internet forum applications based on PHP and MySQL. The application uses a traditional tree view to display information and supports image uploading, template engine, BB code and emoticons. Cross-site scripting, cross-site request forgery, and backup information...
WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting
Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million active installs. This issue allows an attacker to perform a...
Fedora 21 : php-ZendFramework2-2.3.7-1.fc21 (2015-3902)
Version 2.3.7 2015-03-12 - 7255 Revert BC break against AbstractRestfulController Version 2.3.6 2015-03-12 - ZF2015-03 Zend\Validator\Csrf was incorrectly testing null or improperly formatted token identifiers, allowing them to pass validation. This release provides patches to correct the behavio...
AoA Audio Extractor Basic 2.3.7 - ActiveX Exploit
No description provided by source. !-- Exploit Title: AoA Audio Extractor Basic ActiveX Date: 19.05.2014 Author: metacom Website: www.rstforums.com Software Link: www.aoamedia.com/audioextractor.exe Version: 2.3.7 Tested on: Windows xp sp3EN IE 6.0 -- html object...
Musicbox <= 2.3.7 (artistId) Remote SQL Injection Vulnerability
No description provided by source. Rem0te SQL Injection Vulnerability Musicbox viewalbums.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7 Scrip...
CakePHP AssetDispatcher Local File Inclusion Vulnerability
CVE Number: N/A not assigned Title: CakePHP AssetDispatcher Local File Inclusion Vulnerability Affected Software: Confirmed on CakePHP v2.3.7, v2.2.8 prior versions may also be affected Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.8 & 2.2.9 was released which...
Cross site request forgery (csrf)
Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request...
Debian Security Advisory DSA 2328-1 (freetype)
The remote host is missing an update to freetype announced via advisory DSA 2328-1. OpenVAS Vulnerability Test $Id: deb23281.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2328-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Musicbox <= 2.3.7 (artistId) Remote SQL Injection Vulnerability
No description provided by source. Rem0te SQL Injection Vulnerability Musicbox viewalbums.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7 Scrip...
musicbox-sql.txt
Rem0te SQL Injection Vulnerability Musicbox viewalbums.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7 Script Price: Only $ 255.00 Download :...
MusicBox 2.3.7 - artistId SQL Injection
MusicBox 2.3.7 - artistId SQL Injection Rem0te SQL Injection Vulnerability Musicbox viewalbums.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7...
MusicBox 2.3.7 - 'artistId' SQL Injection
Rem0te SQL Injection Vulnerability Musicbox viewalbums.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7 Script Price: Only $ 255.00 Download :...
Musicbox <= 2.3.7 (artistId) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== Musicbox Author: HaCkeR-EgY =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7 Script Price: Only $ 255.00 Download ...