Webkul krayin crm 跨站脚本漏洞

Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...

Authorization Bypass Through User-Controlled Key in Bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

GHSA-PWRF-Q7H8-JJR7 Authorization Bypass Through User-Controlled Key in Bagisto

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

ALPINE-CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

Code injection

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...

CVE-2019-16403

In Webkul Bagisto before 0.1.5, a lack of proper access control allows a user to modify their own data and that of other customers (e.g., address, reviews, orders) via vulnerable customer-endpoints. The root cause is an authorization/control flaw on customer data modification endpoints (e.g., /cu...

Ajax Quiz by Webkul,2.0,SQL Injection

Ajax Quiz by Webkul, 2.0 and previous, SQL Injection Resolution: update to version 2.1 Update notice: https://store.webkul.com/AjaxQuiz.html...

shopify.webkul.com XSS vulnerability

Vulnerable URL: https://shopify.webkul.com/multivendor/index.php?p=checkseller=prompt/OPENBUGBOUNTY/...

Joomla Ultimate Portfolio 1.0 Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...

Joomla Component com_ultimateportfolio Local File Inclusion

Exploit for php platform in category web applications ====================================================================== Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability ======================================================================...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion ======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...