WordPress plugin Clickbank 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

CVE-2024-12229

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely...

WordPress plugin WIP WooCarousel Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Dashi Tongzhou AgileBPM 安全漏洞

Dashi Tongzhou AgileBPM is a fully open process solution from Dashi Tongzhou China. A security vulnerability exists in Dashi Tongzhou AgileBPM version 1.0.0, which stems from improper access control...

Code-Projects Simple CRUD Functionality 代码注入漏洞

Code-Projects Simple CRUD Functionality is a Code-Projects open source web application. Code-Projects Simple CRUD Functionality version 1.0 suffers from a code injection vulnerability that stems from the vulnerability to cross-site scripting attacks via the newtitle/newdescr parameter...

1000 Projects Library Management System 安全漏洞

1000 Projects Library Management System is an open source library management system from 1000 Projects. A security vulnerability exists in 1000 Projects Library Management System version 1.0 due to a SQL injection in parameter q. The vulnerability is caused by the presence of a parameter q in the...

Codezips Project Management System 注入漏洞

Codezips Project Management System is an open source project management system from Codezips. An injection vulnerability exists in CodeZips Project Management System version 1.0, which stems from an incorrect manipulation of the parameter email that can lead to SQL injection...

PT-2024-17495 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System. The issue affects an unknown functionality of the file /admin/complaint-search.php...

SUSE CVE-2024-37303

Synapse is an open-source Matrix homeserver. Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the...

kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files

A buffer overrun flaw exists in the Linux kernel when the strlen function is used on name fields in V1 wmfw files. This issue results in a loss of system availability...

CVE-2024-52676

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...

UBUNTU-CVE-2024-53988

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails = 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanitiz...

libreswan: Invalid IKEv1 Quick Mode ID causes restart

A NULL pointer dereference flaw was found in Libreswan when processing IKEv1 Quick Mode requests. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, it triggers a NULL pointer dereference error. This flaw allows a malicious client or...

PT-2024-35307 · August Infotech · Ai Responsive Gallery Album

Name of the Vulnerable Software and Affected Versions: August Infotech AI Responsive Gallery Album versions n/a through 1.4 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS...

PT-2024-17399 · Unknown · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A critical issue was found in the /visualizar-produto.php file, affecting an unknown part of it. The manipulation of the id argument leads to SQL injection. It is possible to initiate the attack...

PT-2024-35878 · Unknown · Pixobe Cartography

Name of the Vulnerable Software and Affected Versions: Pixobe Cartography versions through 1.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This happens because the web page...

Code-Projects Farmacia 代码注入漏洞

Code-Projects Farmacia is a content management system from Code-Projects open source. A code injection vulnerability exists in Code-Projects Farmacia version 1.0, which stems from the parameter cidade in the file /editar-fornecedor.php that can lead to cross-site scripting attacks...

CVE-2024-11995

A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /pagamento.php. The manipulation of the argument total leads to cross site scripting. The attack can be launched remotely. The exploit...

PT-2024-17389 · Code Projects · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A problem has been found in the file /pagamento.php, affecting an unknown functionality. The manipulation of the total argument leads to cross-site scripting attacks, which can be launched...

PT-2024-17368 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management system version 1.0 Description: A critical issue has been found in the PHPGurukul Complaint Management system, affecting unknown code in the /user/reset-password.php file. The manipulation of the email argument...