IBM Security Verify Access 代码注入漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. A code injection vulnerability exists in IBM Security Verify Access versions 10.0.0.0 through 10.0.0.9 and 11.0.0.0, which stems from improper restrictions on code generation...

WordPress plugin WooCommerce Food - Restaurant Menu & Food ordering 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in the...

Craft CMS Code Injection Vulnerability

Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code execution...

CVE-2025-1465

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high...

CVE-2025-1465

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high...

CVE-2025-1465

CVE-2025-1465 affects lmxcms 1.41, specifically the db.inc.php file in the Maintenance component. The Red Hat/NVD entries describe an unknown function being manipulated to achieve code injection, with remote exploitation possible. Exploitability is characterized as difficult and needs high privil...

CVE-2025-1465 lmxcms Maintenance db.inc.php code injection

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high...

CVE-2025-1465 lmxcms Maintenance db.inc.php code injection

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high...

lmxcms 注入漏洞

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. An injection vulnerability exists in lmxcms version 1.41, which originates from the file db.inc.php of the component Maintenance that can lead to code injection...

CVE-2025-0423 Multiple Unauthenticated Stored Cross-Site Scripting

In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple unauthenticated stored cross-site scripting vulnerabilities. An unauthenticated attacker is able to compromise the sessions of users on the server by injecting JavaScript code into their...

WordPress plugin PressMart 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

GNU GRUB 安全漏洞

GNU GRUB is a Linux system boot program from the GNU community. GNU GRUB suffers from an out-of-bounds write vulnerability, which stems from an unvalidated UFS symbolic link length, that can be exploited by attackers to inject malicious code and tamper with critical data in memory...

WordPress plugin Uncode Core 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

D-Link DIR-816 代码注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. A code injection vulnerability exists in the D-Link DIR-816 version 1.01TO, which stems from the fact that incorrect operation of the parameter SSID can lead to cross-site scripting attacks. The vulnerability can be exploited by an...

IBM Security Verify Access Cross-Site Scripting Vulnerability (CNVD-2025-06213)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

Eastnets PaymentSafe 代码注入漏洞

Eastnets PaymentSafe is a fast gpi payment screening solution from Eastnets UAE that detects and prevents fraud in real time. A code injection vulnerability exists in Eastnets PaymentSafe version 2.5.26.0, which stems from the component BIC Search can lead to cross-site scripting attacks...

Sublime CRM 代码注入漏洞

Sublime CRM is a Customer Relationship Management CRM system from Sublime. A code injection vulnerability exists in Sublime CRM prior to version 20250207, which stems from a cross-site scripting issue in the msgto parameter of the /crm/inicio.php file of the HTTP POST Request Handler module...

FastCMS 代码注入漏洞

FastCMS is a content management system from FastCMS Inc. A code injection vulnerability exists in FastCMS 0.1.5 and earlier versions, which originates from the file /fastcms.html/template/menu of the component template menu can lead to cross-site scripting attacks...

SIAM Industria de Automação e Monitoramento SIAM 代码注入漏洞

SIAM Industria de Automação e Monitoramento SIAM is a software from SIAM Industria de Automação e Monitoramento for managing and configuring automation devices, user permissions, and related functions. A code injection vulnerability exists in SIAM Industria de Automação e Monitoramento SIAM versi...

CVE-2024-56463 IBM QRadar SIEM cross-site scripting

IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...