Online Shopping Portal Parameter Value Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that originates in the parameter value of file /shopping/admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php to the parameter value. The parameter value of...

PT-2024-38342

Name of the Vulnerable Software and Affected Versions Zotpress plugin for WordPress versions up to, and including, 7.3.12 Description The issue allows unauthorized modification of data due to a missing capability check on the Zotpress process accounts AJAX function. This makes it possible for...

WordPress Ajax Content Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ajax Content Filter versions = 1.0...

PT-2024-12484 · Comodo · Itop

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.9 Combodo iTop versions prior to 3.0.4 Combodo iTop versions prior to 3.1.0 Description: Combodo iTop is a simple, web-based IT Service Management tool. When displaying pages, specifically the...

Combodo iTop cross-site scripting vulnerability

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...

WordPress Ajax Content Filter Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Content Filter Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51717 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7cb6e9b7a362 Credits thiennv Required privilege...

CVE-2024-10743

A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been classified as problematic. Affected is an unknown function of the file /shopping/admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php. The manipulation of the argument value leads to cross site...

PHPGurukul Online Shopping Portal Cross-Site Script Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that originates in the parameter value of file /shopping/admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php to the parameter value. The parameter value of...

PT-2024-16507 · Unknown · Phpgurukul Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 2.0 Description: A vulnerability was found in the PHPGurukul Online Shopping Portal, allowing for cross-site scripting XSS attacks. The issue is related to an unknown function in the file...

CVE-2024-10595

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-51482

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

CVE-2024-51482

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

PT-2024-7538

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.37.65 Description ZoneMinder, a free and open source closed-circuit television software application, contains a boolean-based SQL injection flaw. This issue occurs due to a lack of input validation for the tagId...

ZoneMinder SQL injection vulnerability

ZoneMinder is an open source video surveillance software system from ZoneMinder Open Source. The system supports IP, USB, and analog cameras, among others. A SQL injection vulnerability exists in ZoneMinder 1.37.64 and previous versions 1.37.X. The vulnerability stems from web/ajax/event.php bein...

CVE-2024-51482: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

PT-2024-16245 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 5.0.13 Description: The issue is related to a missing capability check on the ajax search users function, allowing authenticated attackers with Subscriber-level access and...

CVE-2024-10437 WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation

The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to unauthorized Smar Message activation/deactivation due to a missing capability check on the ajaxenable function in all versions up to, and including, 4.2.1. This makes it possible for authenticated attackers, with...

PT-2024-16282 · WordPress · Wpc Smart Messages

Name of the Vulnerable Software and Affected Versions: WPC Smart Messages for WooCommerce plugin for WordPress versions up to, and including, 4.2.1 Description: The issue allows authenticated attackers with Subscriber-level access and above to activate or deactivate smart messages due to a missin...

WordPress plugin Crypto has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-39729

Name of the Vulnerable Software and Affected Versions Contact Form 7 + Telegram plugin for WordPress versions up to, and including, 0.8.5 Description The issue allows authenticated attackers with subscriber-level access and above to modify data and cause loss of data due to a missing capability...