PT-2024-16861

Name of the Vulnerable Software and Affected Versions erzhongxmu Jeewms up to 20241108 Description A critical issue affects the processing of the file cgReportController.do of the component AuthInterceptor. The manipulation of the argument begin date leads to sql injection. The attack may be...

JeeWMS injection vulnerability

JeeWMS is JeeWMS open source a JAVA-based warehouse management system . JeeWMS 20241108 and earlier versions have an injection vulnerability that stems from the parameter begindate in the file cgReportController.do can lead to SQL injection...

CVE-2018-19287

XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php aka submissions page begindate, enddate, or formid parameter...

PT-2018-14905

Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.3.18 Description The issue allows remote attackers to execute JavaScript. This is achieved via the begin date, end date, or form id parameter in the submissions page, which is part of the...