CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the "transactiondeletegroup" function. The vulnerability is due to improper sanitization of user input in the "TrDeleteArr" parameter, which is directly incorporated into an SQL query...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

PT-2024-29466

Name of the Vulnerable Software and Affected Versions Money Manager EX WebApp web-money-manager-ex version 1.2.2 Description The issue is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query. This occurs in the transaction delet...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2024-41618: Improper Neutralization of Special Elements used in an SQL Command

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2024-41618

Money Manager EX WebApp (web-money-manager-ex) version 1.2.2 is vulnerable to SQL Injection within the transaction_delete_group function. The root cause is the improper sanitization of user input provided in the TrDeleteArr parameter, which is directly incorporated into an SQL query. This vulnera...

CVE-2024-41617

The Money Manager EX WebApp (web-money-manager-ex) version 1.2.2 is vulnerable to Incorrect Access Control within the functions_security.php file. The redirect_if_not_loggedin function fails to terminate script execution after redirecting unauthenticated users, which allows an unauthenticated att...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The "redirectifnotloggedin" function in "functionssecurity.php" fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitra...

CVE-2024-41617: Incorrect Authorization

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

io.buji:buji-pac4j (2.2.0), org.apereo.cas:cas-management-webapp (>=5.0.6, <=5.0.10) +97 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.7)

org.pac4j:pac4j-core MAVEN version 1.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 2.2.0 - org.apereo.cas:cas-management-webapp =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6,...

autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2024-45231 via django (3.2.2)

django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

Malicious code in intl.walmart.cca.webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663678906f8c3cc94e69d26183d0757c295a9f04195749cd05c3260b980db1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WebApp installations UI Replacement

The vulnerability of WebApp Installs components in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially crafted HTML page...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0258-2)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0258-2 advisory. - Chromium 128.0.6613.84 boo1229591 CVE-2024-7964: Use after free in Passwords CVE-2024-7965: Inappropriate implementation in V8 CVE-2024-7966: O...

com.tencent.devops:devops-boot-starter-plugin (1.0.0), com.tencent.devops:devops-plugin-core (1.0.0) +3 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.3.1, <=3.3.2)

org.springframework.boot:spring-boot-loader MAVEN version =3.3.1, =3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-loader and may be impacted: - com.tencent.devops:devops-boot-starter-plugin 1.0.0 -...