WordPress BCS BatchLine Book Importer plugin <= 1.5.7 - Unauthenticated Product Import/Update vulnerability

Unauthenticated Product Import/Update vulnerability discovered in WordPress BCS BatchLine Book Importer plugin versions = 1.5.7. Solution Update the WordPress BCS BatchLine Book Importer plugin to the latest available version at least 1.5.8...

BCS BatchLine Book Importer < 1.5.8 - Unauthenticated Product Import

The plugin did not correctly check for permission in its wc/v3/bcsbertlinebookimport REST route, allowing unauthenticated to import arbitrary products or update existing ones POST /wp-json/wc/v3/bcsbertlinebookimport HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflat...

bcs.com XSS vulnerability

Open Bug Bounty ID: OBB-622694 Description| Value ---|--- Affected Website:| bcs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Battle.net Clan Script for PHP 1.5.1 - Remote SQL Injection Vulnerability

No description provided by source. script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass = $POST'pass';...

CVE-2008-5882

CVE-2008-5882 describes a SQL injection in login.asp of Citrix Application Gateway – Broadcast Server (BCS) before 6.1, used by Avaya AG250 – Broadcast Server before 2.0 and possibly other products. The vulnerability arises via the txtUID parameter and could allow remote execution of arbitrary SQ...