4 matches found
CVE-2024-8513
The QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxsavepluginconfig function in all versions up to, and including, 4.1.0.0. This makes it possibl...
PT-2022-3796
Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description Multiple command injection vulnerabilities exist in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a...
Cross-site request forgery vulnerability in phpMyFaq admin/ajax.config.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
