Lucene search
+L

50 matches found

Cvelist
Cvelist
•added 2019/07/05 1:20 p.m.•37 views

CVE-2019-5970

Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1AI score0.01596EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/07/05 12:00 a.m.•6 views

PT-2019-17905

Name of the Vulnerable Software and Affected Versions Attendance Manager versions 0.5.6 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. Recommendations For Attendance Manager versions 0.5.6 and earlier, update to a...

8.8CVSS0.01042EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/05 12:00 a.m.•4 views

CVE-2019-5971: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS5.9AI score0.01042EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/05 12:00 a.m.•8 views

CVE-2019-5970: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score0.01596EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/07/05 12:00 a.m.•6 views

PT-2019-17904

Name of the Vulnerable Software and Affected Versions Attendance Manager versions 0.5.6 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Attendance Manager versions 0.5.6 and earlier, update to a version later...

6.1CVSS0.01596EPSS
SaveExploits0References6
CNVD
CNVD
•added 2019/06/13 12:00 a.m.•20 views

WordPress Attendance Manager plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Attendance Manager Plugin is an attendance management plugin used in it. A cross-site request forgery vulnerability...

8.8CVSS6.8AI score0.01042EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/06/10 6:31 a.m.•21 views

Multiple vulnerabilities in WordPress Plugin "Attendance Manager"

Overview WordPress Plugin "Attendance Manager" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2019-5970 Cross-site request forgery vulnerability CWE-352 - CVE-2019-5971 Natsumi Matsuoka of Cryptography...

8.8CVSS6.2AI score0.01596EPSS
SaveExploits0References9
WPVulnDB
WPVulnDB
•added 2019/06/10 12:00 a.m.•17 views

Attendance Manager <= 0.5.6 - CSRF & XSS

The Attendance Manager WordPress plugin was affected by a CSRF & XSS security vulnerability...

6.8CVSS2.7AI score0.01596EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/06/10 12:00 a.m.•210 views

JVN#95685939: Multiple vulnerabilities in WordPress Plugin "Attendance Manager"

WordPress Plugin "Attendance Manager" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2019-5970 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

8.8CVSS7.5AI score0.01596EPSS
SaveExploits0
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•20 views

WordPress Attendance Manager Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Attendance Manager Plugin is an attendance management plugin used in it. A cross-site scripting vulnerability exists in...

8.8CVSS6.3AI score0.01596EPSS
SaveExploits0References1
Rows per page
Query Builder