6115 matches found
KIA Instrument Cluster KIA Seltos Software 安全漏洞
KIA Instrument Cluster KIA Seltos Software is an in-vehicle communication system from the Korean company KIA. A security vulnerability exists in KIA Instrument Cluster KIA Seltos Software version v1.0. An attacker exploiting this vulnerability could cause the program to suffer a denial of service...
Wangtai idcCMS 安全漏洞
Wangtai idcCMS is a cloud management agent system from China Nettai Wangtai. A security vulnerability exists in Wangtai idcCMS version 1.60, which stems from improper manipulation of the parameter idName and can lead to cross-site scripting attacks...
PT-2024-17125 · Unknown · 1000 Projects Beauty Parlour Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/about-us.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploit...
1000 Projects Bookstore Management System 安全漏洞
1000 Projects Bookstore Management System is an open source bookstore management system by 1000 Projects. A security vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from an incorrect operation of the parameter unm that can lead to SQL injection...
CVE-2024-11490
A vulnerability was found in 115cms up to 20240807. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the argument type leads to cross site scripting. The attack can be launched remotely...
KASDA KW6512 安全漏洞
KASDA KW6512 is a wireless router from KASDA. A security vulnerability exists in the KASDA KW6512 version V1.0. A remote attacker can exploit this vulnerability to execute arbitrary operating system commands via the quick setup and page parameters passed to internet.cgi...
WordPress plugin Xpresslane Fast Checkout Plugin 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2024-17024 · Unknown · Code4Berry Decoration Management System
Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A problematic issue was found in the Code4Berry Decoration Management System, affecting an unknown part of the file /decoration/admin/user permission.php of the component User...
PT-2024-17025 · Unknown · Code4Berry Decoration Management System
Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A critical issue has been discovered, affecting the file /decoration/admin/btndates report.php of the component Between Dates Reports. The manipulation of the fromdate and todat...
WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Ultimate Classified Listings versions = 1.7...
WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Elementor Portfolio Builder versions = 1.0.0...
WordPress plugin Naver Blog 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...
WordPress plugin File Select Control For Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress plugin Advanced Video Player with Analytics 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-34951 · WordPress · Advanced Video Player With Analytics
Name of the Vulnerable Software and Affected Versions: Advanced Video Player with Analytics version 1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This is a DOM-Based XSS vulnerability. It affects the...
WordPress plugin ReConstruction 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
Korenix JetPort 5601 路径遍历漏洞
The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in Korenix JetPort 5601 version 1.2 and earlier, which stems from vulnerability to path traversal attacks...
ZTE NH8091 安全漏洞
ZTE NH8091 is a modem from ZTE Corporation ZTE, China. A security vulnerability exists in the ZTE NH8091 V1.8 version, which originates from improper control of the Web module interface privileges and can be exploited by an authenticated attacker to execute arbitrary commands...
CVE-2024-11256
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has bee...