ContiNew Admin SQL注入漏洞

ContiNew Admin is ContiNew open source a continuous iterative optimization of front-end and back-end separation of middle and back-end management system framework. A SQL injection vulnerability exists in ContiNew Admin version 3.2.0, which stems from the operation of the parameter sort that can...

CVE-2024-41248

An Incorrect Access Control vulnerability was found in /smsa/addsubject.php and /smsa/addsubjectsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry...

WordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Blockspare versions = 3.2.0...

PT-2024-29323 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/view teachers.php endpoint, allowing remote unauthenticated attackers to view teacher details due to incorrect access control...

PT-2024-29321 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/view marks.php endpoint, allowing remote unauthenticated attackers to view MARKS details due to incorrect access control. Recommendations...

PT-2024-29320 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: A Reflected Cross Site Scripting XSS issue was discovered in the /smsa/student login.php endpoint, allowing remote attackers to execute arbitrary code via the error...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which stems from an incorrect access control vulnerability contained in the /smsa/viewsubject.php file...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which stems from an incorrect access control vulnerability contained in the /smsa/admindashboard.php file...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in the Kashipara Responsive School Management System version v3.2.0, which stems from an error in the /smsa/adminteacherregisterapproval.php file and the...

PT-2024-29326 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the Kashipara Responsive School Management System, specifically in the /smsa/add subject.php and /smsa/add subject submit.php API endpoints, allowi...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which originates from a reflected cross-site scripting vulnerability contained in the /smsa/studentlogin.php...

PT-2024-29324 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/admin dashboard.php endpoint, allowing remote unauthenticated attackers to view the administrator dashboard due to incorrect access...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which stems from an incorrect access control vulnerability contained in the /smsa/addclass.php file and...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which stems from an incorrect access control vulnerability contained in the /smsa/viewteachers.php file...

PT-2024-29322 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An Incorrect Access Control issue was found in the /smsa/view class.php endpoint, allowing remote unauthenticated attackers to view class details. This could lead to...

WordPress plugin Ultimate Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-32650 affecting package kata-containers for versions less than 3.2.0.azl2-3

CVE-2024-32650 affecting package kata-containers for versions less than 3.2.0.azl2-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25576 affecting package kata-containers for versions less than 3.2.0.azl2-3

CVE-2020-25576 affecting package kata-containers for versions less than 3.2.0.azl2-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-4869

The WP Cookie Consent for GDPR, CCPA & ePrivacy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

PT-2024-27048 · Unknown · Puppeteer-Renderer

Name of the Vulnerable Software and Affected Versions: puppeteer-renderer versions 3.2.0 and earlier Description: The issue allows attackers to exploit the URL parameter using the file protocol to read sensitive information from the server. This is achieved through a Directory Traversal attack...