CVE-2023-4737

CVE-2023-4737 is an SQL Injection vulnerability affecting Hedef Tracking Admin Panel versions prior to 1.2. The root cause is improper neutralization of special elements in SQL commands, enabling an attacker to manipulate queries. The CVSS 3.1 base score is 9.8 (Network attack, no user interactio...

CVE-2023-4737 SQLi in Hedef Trackings Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...

CVE-2023-4737 SQLi in Hedef Trackings Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...

Hedef Tracking Admin Panel SQL Injection Vulnerability

Hedef Tracking Admin Panel is a tracking admin panel from Hedef. A SQL injection vulnerability exists in Hedef Tracking Admin Panel versions prior to 1.2, which stems from incorrect neutralization of the particular element used...

PT-2023-30432

Name of the Vulnerable Software and Affected Versions Hedef Tracking Admin Panel versions prior to 1.2 Description The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2023-39777

A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...

PT-2023-27103 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin versions 5.7.5 through 6.0.0 Description: A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin allows attackers to execute arbitrary web scripts or HTML via the "/login.php?do=login" url parameter...

CVE-2023-4766 SQLi in Movus Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...

CVE-2023-4766 SQLi in Movus Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...

CVE-2023-4294

The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link...

Design/Logic Flaw

The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link...

PT-2023-28647 · WordPress · Url Shortify

Name of the Vulnerable Software and Affected Versions: URL Shortify WordPress plugin versions prior to 1.7.6 Description: The issue allows an unauthenticated attacker to inject malicious javascript that will trigger in the plugin's admin panel with statistics of the created short link, due to the...

CVE-2023-4528

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 Windows, Linux, and MacOS permits an attacker to run arbitrary Java code including OS commands via its management interface...

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

CVE-2023-4480

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...

CVE-2023-4480 Arbitrary File Read in Fusion File Manager

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...

CVE-2023-4480 Arbitrary File Read in Fusion File Manager

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...

PT-2023-4916 · Unknown · Super Store Finder

Name of the Vulnerable Software and Affected Versions: Super Store Finder version 3.6 Description: The issue is related to a lack of protection against SQL query structure exploitation, which can allow a remote attacker to gain access to the administration panel. The store locator component is...

PT-2023-29616 · Capensis +1 · Canopsis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel. Recommendations: A...

Hospital HMS 2 SQL Injection

====================================================================================================================================== | Title : Hospital HMS v2 auth by pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit | ...