1000 Projects Bookstore Management System 安全漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A security vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which originates from the inclusion of a cross-site request forgery...

PT-2024-17154 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical vulnerability was found in the 1000 Projects Beauty Parlour Management System. The issue affects an unknown functionality of the file /admin/edit-services.php...

WordPress AutoListicle plugin <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin AutoListicle versions = 1.2.3...

KIA Instrument Cluster KIA Seltos Software 安全漏洞

KIA Instrument Cluster KIA Seltos Software is an in-vehicle communication system from the Korean company KIA. A security vulnerability exists in KIA Instrument Cluster KIA Seltos Software version v1.0. An attacker exploiting this vulnerability could cause the program to suffer a denial of service...

Wangtai idcCMS 安全漏洞

Wangtai idcCMS is a cloud management agent system from China Nettai Wangtai. A security vulnerability exists in Wangtai idcCMS version 1.60, which stems from improper manipulation of the parameter idName and can lead to cross-site scripting attacks...

PT-2024-17125 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/about-us.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploit...

1000 Projects Bookstore Management System 安全漏洞

1000 Projects Bookstore Management System is an open source bookstore management system by 1000 Projects. A security vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from an incorrect operation of the parameter unm that can lead to SQL injection...

CVE-2024-11490

A vulnerability was found in 115cms up to 20240807. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the argument type leads to cross site scripting. The attack can be launched remotely...

KASDA KW6512 安全漏洞

KASDA KW6512 is a wireless router from KASDA. A security vulnerability exists in the KASDA KW6512 version V1.0. A remote attacker can exploit this vulnerability to execute arbitrary operating system commands via the quick setup and page parameters passed to internet.cgi...

WordPress plugin Xpresslane Fast Checkout Plugin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2024-17024 · Unknown · Code4Berry Decoration Management System

Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A problematic issue was found in the Code4Berry Decoration Management System, affecting an unknown part of the file /decoration/admin/user permission.php of the component User...

PT-2024-17025 · Unknown · Code4Berry Decoration Management System

Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A critical issue has been discovered, affecting the file /decoration/admin/btndates report.php of the component Between Dates Reports. The manipulation of the fromdate and todat...

WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Ultimate Classified Listings versions = 1.7...

WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Elementor Portfolio Builder versions = 1.0.0...

WordPress plugin Naver Blog 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

WordPress plugin File Select Control For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-34951 · WordPress · Advanced Video Player With Analytics

Name of the Vulnerable Software and Affected Versions: Advanced Video Player with Analytics version 1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This is a DOM-Based XSS vulnerability. It affects the...

WordPress plugin Advanced Video Player with Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Korenix JetPort 5601 路径遍历漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in Korenix JetPort 5601 version 1.2 and earlier, which stems from vulnerability to path traversal attacks...

WordPress plugin ReConstruction 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...