10298 matches found
WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Access Manager Type Plugin Vulnerable versions = 6.9.15 Fixed in 6.9.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50881 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d6fc616194fa Credits Ngô Thiên An ancorn from...
Shifting from reCAPTCHA to hCaptcha
We are adding another CAPTCHA vendor and helping our customers migrate from Googles reCAPTCHA to hCaptcha. Why We Are Making This Change We continuously evaluate our security measures to ensure they align with the evolving landscape of threats. After carefully evaluating several different CAPTCHA...
CVE-2023-6145
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 121220...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Istanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.This issue affects Softomi Advanced C2C Marketplace Software: before 1212202...
CVE-2023-6145
CVE-2023-6145 affects Softomi Advanced C2C Marketplace Software (Istanbul Soft Informatics and Consultancy) prior to version 12122023. Root cause is improper neutralization of special elements in SQL commands, enabling SQL injection (high impact: confidentiality, integrity, and availability all a...
CVE-2023-6145 SQLi in Softomi E-commerce Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 121220...
The vulnerability of the application access control library in the SAP XS Advanced sap/xssec development, integration, and application extension platform in the SAP Business Technology Platform (BTP) environment arises from insecure management of privileges. This allows attackers to escalate their privileges.
The vulnerability of the application access control library in the SAP XS Advanced sap/xssec development, integration, and application extension platform in the SAP Business Technology Platform BTP environment is related to insecure management of privileges. Exploiting this vulnerability can allo...
WordPress Advanced Form Integration Plugin <= 1.75.0 is vulnerable to SQL Injection
Software Advanced Form Integration Type Plugin Vulnerable versions = 1.75.0 Fixed in 1.76.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50853 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID b0d2ea2b120c Credits Muhammad Daffa Required privilege...
PT-2023-32543
Name of the Vulnerable Software and Affected Versions Softomi Advanced C2C Marketplace Software versions prior to 12122023 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...
WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection
Software Squirrly SEO - Advanced Pack Type Plugin Vulnerable versions = 2.3.8 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50854 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d251faf0f6ee Credits Muhammad Daffa Required privilege...
CVE-2023-50835
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835 WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-50835
CVE-2023-50835 is a CSRF vulnerability in the Advanced Category Template. Red Hat’s entry confirms the issue affects the Advanced Category Template up to version 0.1 (no details on fixed version are provided in the connected doc). The CVSS data in the initial document indicates a high-severity co...
CVE-2023-50835 WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1...
CVE-2023-49764
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Younes JFR. Advanced Database Cleaner.This issue affects Advanced Database Cleaner: from n/a through 3.1.2...
CVE-2023-49764
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Younes JFR. Advanced Database Cleaner.This issue affects Advanced Database Cleaner: from n/a through 3.1.2...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Younes JFR. Advanced Database Cleaner.This issue affects Advanced Database Cleaner: from n/a through 3.1.2...