PT-2023-32180 · WordPress · Shortcode Menu

Name of the Vulnerable Software and Affected Versions: Shortcode Menu plugin for WordPress versions up to, and including, 3.2 Description: The issue is related to Stored Cross-Site Scripting via the shortmenu shortcode due to insufficient input sanitization and output escaping on user-supplied...

Django Security Vulnerabilities

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django that stems from a linear backtracking complexity issue ...

CVE-2023-41539

phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

PT-2023-27966 · Phpjabbers · Phpjabbers Business Directory Script

Name of the Vulnerable Software and Affected Versions: phpjabbers Business Directory Script version 3.2 Description: The issue is related to SQL Injection via the column parameter. This allows for potential manipulation of database queries. Recommendations: For phpjabbers Business Directory Scrip...

PT-2023-27964

Name of the Vulnerable Software and Affected Versions phpjabbers Business Directory Script version 3.2 Description The issue concerns Cross Site Scripting XSS via the keyword parameter. This allows for potential malicious script injection. No information is provided about the estimated number of...

Business Directory Script 跨站脚本漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

CVE-2023-40753

There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...

CVE-2023-40753

There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...

PT-2023-27102 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: A File Upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For PHPJabbers Ticket Support Script version 3.2, consider disabling file...

CVE-2022-45823

Cross-Site Request Forgery CSRF vulnerability in GalleryPlugins Video Contest WordPress plugin = 3.2 versions...

Sql injection

A vulnerability was found in Dynacase Webdesk and classified as critical. Affected by this issue is the function freedomrsssearch of the file freedomrsssearch.php. The manipulation leads to sql injection. Upgrading to version 3.2-20180305 is able to address this issue. The patch is identified as...

PT-2023-10353 · Dynacase · Dynacase Webdesk

Name of the Vulnerable Software and Affected Versions: Dynacase Webdesk versions prior to 3.2-20180305 Description: A critical issue was found in Dynacase Webdesk, affecting the freedomrss search function of the freedomrss search.php file. This issue leads to sql injection. Recommendations: Upgra...

PYSEC-2023-113

Products.CMFCore are the key framework services for the Zope Content Management Framework CMF. The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is...

PYSEC-2023-113

Products.CMFCore are the key framework services for the Zope Content Management Framework CMF. The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is...

CVE-2023-36814 zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module

Products.CMFCore are the key framework services for the Zope Content Management Framework CMF. The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is...

CVE-2023-36814 zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module

Products.CMFCore are the key framework services for the Zope Content Management Framework CMF. The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is...

CVE-2023-3474

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...

PT-2023-24993 · Unknown · Simplephpscripts Simple Blog

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Simple Blog version 3.2 Description: A vulnerability has been found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack can be launched remotely. Recommendations: Fo...

SimplePHPscripts Simple Blog 跨站脚本漏洞

SimplePHPscripts Simple Blog is a blogging system from the Bulgarian company SimplePHPscripts. A cross-site scripting vulnerability exists in SimplePHPscripts Simple Blog version 3.2, which stems from a problem with the file preview.php that can lead to cross-site scripting...