CVE-2023-46200: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin = 1.1.3 versions...

PT-2023-29900 · Unknown · Smart App Banner Plugin

Name of the Vulnerable Software and Affected Versions: Smart App Banner plugin versions 1.1.3 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...

WordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Smart App Banner Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46200 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID fcd7b0b28b62 Credits Rio Darmawan Required...

Oracle MySQL Server 8.1.0 Security Update (cpuoct2023) - Linux

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle MySQL Server 8.x <= 8.0.34 Security Update (cpuoct2023) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

SUSE-RU-2023:4066-1 Recommended update for libssh2_org

This update for libssh2org fixes the following issues: libssh2org was upgraded to version 1.11.0 in SUSE Linux Enterprise Server 12 SP5 jscPED-5721 Version update to 1.11.0: Enhancements and bugfixes: - Adds support for encrypt-then-mac ETM MACs - Adds support for AES-GCM crypto protocols - Adds...

WordPress AdRotate Manage Banner Plugin < 5.3 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adrotatebannermanagerproject:adrotatebannermanager";...

Woocommerce Category Banner Management < 2.4.3 - Shop Banner Settings Update via CSRF

Description The plugin does not have CSRF check when updating its Shop Banner settings, which could allow attackers to make logged in admins perform such action via a CSRF attack...

CVE-2023-39158

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

CVE-2023-39158

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

CVE-2023-39158 WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

CVE-2023-39158

The CVE-2023-39158 entry concerns the WordPress plugin Banner Management For WooCommerce (theDotstore) with CSRF in versions

CVE-2023-39158: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Banner Management For WooCommerce plugin = 2.4.2 versions...

WordPress Plugin Banner Management For WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Nagios XI update_banner_message() Code Execution

The vulnerability of the updatebannermessage function in the Nagios XI monitoring tool is related to the lack of measures taken to protect the SQL query structure when processing the ID parameter. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access t...

CVE-2023-39640

UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList...

CVE-2023-39640

UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList...

PrestaShop cookiebanner SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop cookiebanner versions prior to 1.5.1, which stems from the...

Nagios XI Script Disclosure Protected Information

The vulnerability in the nagiosxi/admin/bannermessage-ajaxhelper.php script of Nagios XI relates to the failure to protect the SQL query structure during the processing of the ID parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive information...