CVE-2024-58393 i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php

i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...

CVE-2024-58393

The i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) is vulnerable to an SQL injection flaw. Unauthenticated attackers can manipulate database queries by sending GET requests to /product-details.php using boolean-based , stacked , or time-based SLEEP payloads in the 'id' paramete...

EUVD-2022-56069

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

CVE-2022-51025

Penta Security WAPPLES versions 4.0.54.1 , 5.0 , and 6.0 are affected by a path traversal vulnerability in the /webapi/file/transfer endpoint. Authenticated attackers can exploit the name parameter by using ../ sequences and the type=db_backup parameter to download arbitrary files, such as /etc/p...

CVE-2022-51025 Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

CVE-2023-54413 WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang

WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wplang parameter. Attackers can lure users to /wp-login.php with a wplang value injecting an ima...

CVE-2023-54413

The WPML Multilingual CMS plugin for WordPress versions prior to 4.6.1 is vulnerable to a reflected cross-site scripting (XSS) flaw. The vulnerability exists due to insufficient input validation of the wp_lang parameter. An unauthenticated attacker can craft a malicious link to /wp-login.php cont...

EUVD-2023-60723

WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wplang parameter. Attackers can lure users to /wp-login.php with a wplang value injecting an ima...

CVE-2022-51025 Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

CVE-2022-51024 Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint

Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename values like ../appsettings.json to...

CVE-2022-51024 Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint

Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename values like ../appsettings.json to...

CVE-2022-51024

Kavita versions 0.5.2 before 0.5.4.1 are vulnerable to a path traversal vulnerability (CWE-22) that allows unauthenticated attackers to read arbitrary files. By supplying ../ sequences in the filename parameter via GET requests to the /api/image/cover-upload endpoint, an attacker can retrieve sen...

EUVD-2022-56068

Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename values like ../appsettings.json to...

CVE-2022-51022 YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint

YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory...

CVE-2022-51023 PHPOK < 5.4.081 SQL Injection via api.php sort Parameter

PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort to extract database information throug...

EUVD-2022-56067

PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort to extract database information throug...

CVE-2022-51023

PHPOK versions 4.5.000 before 5.4.081 are vulnerable to an SQL injection vulnerability. The root cause is the improper handling of the sort parameter , which allows unauthenticated attackers to manipulate ORDER BY clauses. By sending GET requests to /api.php?c=project&f=index using extractvalue p...

CVE-2022-51023 PHPOK < 5.4.081 SQL Injection via api.php sort Parameter

PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort to extract database information throug...

CVE-2022-51022

The YiShaAdmin software (versions 2.2 through 3.1 ) is susceptible to an unauthenticated path traversal vulnerability within the /admin/File/DownloadFile endpoint. The root cause allows attackers to use directory traversal sequences in the filePath parameter to read or delete arbitrary system fil...

CVE-2022-51022 YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint

YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory...