PT-2024-24487

Name of the Vulnerable Software and Affected Versions The Salon booking system plugin for WordPress versions up to, and including, 10.2 Description The issue is related to arbitrary file uploads due to missing file type validation in the SLN Action Ajax ImportAssistants function, along with missi...

PT-2019-7547

Name of the Vulnerable Software and Affected Versions osClass version 3.6.1 Description The issue allows for directory traversal via the plugin parameter, which can be exploited for remote PHP code execution. An administrator can upload an image containing PHP code in the EXIF data through the...

PT-2018-14635

Name of the Vulnerable Software and Affected Versions SaltOS version 3.1 r8126 Description The issue allows for SQL Injection via the action2 parameter in the action=ajax&query=numbers&page=usuarios endpoint. This can be exploited by injecting malicious SQL code into the action2 parameter, marked...

CVE-2018-18763: Improper Neutralization of Special Elements used in an SQL Command

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=SQL SQL Injection...

CVE-2011-4361

MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by 1 leveraging the SpecialUpload::ajaxGetExistsWarning function, or by 2 leveraging an extension, as demonstrated by the CategoryTree,...

CVE-2011-4361: Incorrect Default Permissions

MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by 1 leveraging the SpecialUpload::ajaxGetExistsWarning function, or by 2 leveraging an extension, as demonstrated by the CategoryTree,...