CVE-2022-46952: Improper Neutralization of Special Elements used in an SQL Command

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuser...

CVE-2022-41532: Improper Neutralization of Special Elements used in an SQL Command

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/ajax.php?action=deleteplan...

PT-2022-25902

Name of the Vulnerable Software and Affected Versions Open Source SACCO Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/sacco shield/ajax.php?action=delete loan" API endpoint...

PT-2022-21047

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue allows for arbitrary code execution via the "car-rental-management-system/admin/ajax.php?action=save car" API endpoint. Recommendations For Car Rental Management System version 1.0...

CVE-2022-28590

A Remote Code Execution RCE vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=installtheme...

PT-2022-2479

Name of the Vulnerable Software and Affected Versions Pixelimity version 1.0 Description A Remote Code Execution RCE issue exists due to the lack of input data sanitization. This allows a remote attacker to execute arbitrary code through the "admin/admin-ajax.php?action=install theme" endpoint. T...

Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types

The plugin does not sanitise and escape the posttypes parameter before outputting it back in the response of the postgridupdatetaxonomiestermsbyposttypes AJAX action, available to any authenticated users, leading to a Reflected Cross-Site Scripting " name="posttypes"...

PT-2021-21621

Name of the Vulnerable Software and Affected Versions SEACMS version 210530 Description The issue allows remote attackers to execute arbitrary code via the component "admin ajax.php?action=checkrepeat&v name=". This is a SQL Injection vulnerability. The v name variable in the "admin...

CVE-2021-24200: Improper Neutralization of Special Elements used in an SQL Command

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...

PT-2021-11454

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0 Description: A SQL injection issue allows remote unauthenticated attackers to bypass the admin authentication mechanism, gaining access to the website administrative panel through the "college...

PT-2021-11455

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0 Description: The issue allows a user to conduct remote code execution via the "/alumni/admin/ajax.php?action=save settings" API endpoint when uploading a malicious file using the image upload functionality...

PT-2021-17125

Name of the Vulnerable Software and Affected Versions wpDataTables versions prior to 3.4.1 Description The issue is related to how wpDataTables handles order direction for server-side tables, leading to a SQL injection. This can be exploited through the "admin-ajax.php?action=get wdtable" endpoin...

PT-2020-16188

Name of the Vulnerable Software and Affected Versions SourceCodester Seat Reservation System version 1.0 Description The issue concerns a lack of input validation on the username and password parameters in the admin class.php file. This allows an attacker to send malicious input in the POST reque...

PT-2020-13567

Name of the Vulnerable Software and Affected Versions Bitrix24 versions prior to 20.0.976 Description The issue allows for Server-Side Request Forgery SSRF via an intranet IP address in the "services/main/ajax.php?action=attachUrlPreview" API endpoint, specifically through the url parameter. This...

CVE-2020-7916

beteacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itself the teacher role via the wp-admin/admin-ajax.php?action=learnpressbeteacher URI without any additional permission checks. Therefore, any user can change its...

PT-2020-19845

Name of the Vulnerable Software and Affected Versions LearnPress plugin versions 3.2.6.5 and earlier Description The issue allows any registered user to assign itself the teacher role via the "wp-admin/admin-ajax.php?action=learnpress be teacher" API endpoint without any additional permission...

PT-2019-7409

Name of the Vulnerable Software and Affected Versions plugmatter-optin-feature-box-lite plugin versions prior to 2.0.14 Description The issue concerns SQL injection via the "wp-admin/admin-ajax.php?action=pmfb cc" API endpoint, specifically through the pmfb tid parameter. This allows for potentia...

CVE-2015-9438

The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dwshowwidget idbase, widgetnumber, or instance parameter...

CVE-2015-9436

The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=termtree prefix or widgetid parameter...

PT-2019-7380

Name of the Vulnerable Software and Affected Versions olevmedia-shortcodes plugin versions prior to 1.1.9 Description The issue concerns a CSRF with resultant XSS in the olevmedia-shortcodes plugin for WordPress. This occurs via the "wp-admin/admin-ajax.php?action=omsc popup" API endpoint,...