Lucene search
+L

150559 matches found

NVD
NVD
•added 2024/12/21 2:15 p.m.•41 views

CVE-2024-12884

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00798EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/12/21 2:00 p.m.•39 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00798EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/21 2:00 p.m.•93 views

CVE-2024-12884

CVE-2024-12884 affects Codezips E-Commerce Website 1.0. The vulnerability is an SQL injection in the login.php function triggered by manipulating the email parameter, allowing remote exploitation. Multiple connected sources corroborate the issue and describe it as critical, with exploitation disc...

9.8CVSS7.4AI score0.00798EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/21 2:00 p.m.•13 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits1References4
NVD
NVD
•added 2024/12/21 10:15 a.m.•29 views

CVE-2024-10453

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings in all versions up to, and including, 3.25.9 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/21 9:23 a.m.•14 views

CVE-2024-10453 Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings in all versions up to, and including, 3.25.9 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS5.8AI score0.0032EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/21 9:23 a.m.•133 views

CVE-2024-10453

CVE-2024-10453 concerns the vulnerability in Elementor Website Builder – More Than Just a Page Builder . The vulnerability is a Stored Cross-Site Scripting issue in the plugin’s Typography Settings, arising from insufficient input sanitization and output escaping on user-supplied attributes. It a...

6.4CVSS5.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/12/21 9:23 a.m.•48 views

CVE-2024-10453 Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings in all versions up to, and including, 3.25.9 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/21 12:00 a.m.•18 views

WordPress plugin Elementor Website Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.0032EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/21 12:00 a.m.•7 views

CVE-2024-12884: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.5AI score0.00798EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/21 12:00 a.m.•17 views

PT-2024-17775 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Website version 1.0 Description: A critical issue affects some unknown functionality of the file /login.php. The manipulation of the email argument leads to SQL injection. The attack may be launched remotely. The exploit h...

9.8CVSS8.1AI score0.00798EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/12/21 12:00 a.m.•14 views

Codezips E-Commerce Website 注入漏洞

Codezips E-Commerce Website is an open source e-commerce website by Codezips. An injection vulnerability exists in Codezips E-Commerce Website version 1.0, which originates from an SQL injection in the parameter email...

9.8CVSS7.9AI score0.00798EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/21 12:00 a.m.•9 views

CVE-2024-10453: Improper Neutralization of Input During Web Page Generation

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings in all versions up to, and including, 3.25.9 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•13 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00641EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•18 views

The vulnerability of Adobe Connect web conference software lies in the insufficient protection of the website structure, which allows attackers to execute arbitrary code.

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS5.9AI score0.00314EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•19 views

The vulnerability of Adobe Connect web conference software lies in the insufficient protection of the website structure, which allows attackers to execute arbitrary code.

The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS5.9AI score0.00335EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•17 views

The vulnerability of the operating system for managing Synology Router Manager allows for cross-site scripting attacks, as a lack of security measures has been taken to protect the website structure. This vulnerability enables attackers to carry out cross-site scripting attacks.

The vulnerability of the Synology Router Manager operating system for managing network devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.5CVSS5.2AI score0.00271EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•19 views

The vulnerability of the operating system for managing Synology Router Manager allows for cross-site scripting attacks, as a lack of security measures has been taken to protect the website structure. This vulnerability enables attackers to carry out cross-site scripting attacks.

The vulnerability of the Synology Router Manager operating system for managing network devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.5CVSS5.2AI score0.00271EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•20 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00641EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/20 12:00 a.m.•23 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00641EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder