Lucene search
+L

3 matches found

wpexploit
wpexploit
added 2023/11/06 12:0 a.m.188 views

Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS

Description The plugin does not escape the custom shipping phone field no the checkout form leading to XSS 1 Install both WooCommerce and the plugin. 2 Set a WooCommerce shipping method, and the store's address to one that is in Vietnam. 3 Add product to cart, and proceed to checkout 4 Tick "Ship...

6.1CVSS6.3AI score0.00471EPSS
SaveExploits2
Cvelist
Cvelist
added 2023/03/27 8:33 p.m.42 views

CVE-2023-28630 Sensitive information disclosure possible on misconfigured failed backups of non-H2 databases in gocd

GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be unintentionally...

4.2CVSS5.1AI score0.00254EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2005/06/28 4:0 a.m.27 views

CVE-2002-1932

Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events clear log manually" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection...

6.5AI score0.12785EPSS
SaveExploits0References4
Rows per page
Query Builder