3457 matches found
CVE-2022-1842 OpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRF
The OpenBook Book Data WordPress plugin through 3.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well...
CVE-2022-1842
CVE-2022-1842 affects the WordPress OpenBook Book Data plugin (versions
CVE-2022-2214
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
WordPress plugin OpenBook Book Data 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress OpenBook Book Data plugin version 3.5.2 and earlier versions are vulnerable to cross-site request...
irishbookawards.ie Cross Site Scripting vulnerability OBB-2664236
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress OpenBook Book Data plugin <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRF vulnerability
Arbitrary Settings Update to Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress OpenBook Book Data plugin versions = 3.5.2. Solution Deactivate and delete. This plugin has been closed as of May 24, 2022 and is not available for download. This closure is temporary, pending a...
OpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well PoC...
CVE-2022-1644
The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2022-1644
The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2022-1644
CVE-2022-1644 affects the Call&Book Mobile Bar WordPress plugin up to version 1.2.2. The vulnerability stems from inadequate sanitization/escaping of certain settings, allowing a high-privilege user (e.g., admin) to perform stored XSS even when unfiltered_html is disallowed. Exploitation details ...
WordPress plugin Call&Book Mobile Bar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Call...
GHSA-W3MQ-67MW-3P9F Magento Cross-Site Request Forgery (CSRF)
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433...
georgiacenterforthebook.org Cross Site Scripting vulnerability OBB-2616786
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Windows Address Book on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Address Book on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
CVE-2022-26926
Windows Address Book Remote Code Execution Vulnerability...
CVE-2022-26926
Windows Address Book Remote Code Execution Vulnerability...
CVE-2022-26926
Windows Address Book Remote Code Execution Vulnerability...
Remote code execution
Windows Address Book Remote Code Execution Vulnerability...
