Lucene search
+L

1749 matches found

CVE
CVE
•added 2023/09/04 11:30 a.m.•70 views

CVE-2023-32578

CVE-2023-32578 is a Stored XSS against Twinpictures Column-Matic plugin

6.5CVSS5.5AI score0.00361EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/04 11:30 a.m.•34 views

CVE-2023-32578 WordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

6.5CVSS6AI score0.00361EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/04 12:00 a.m.•21 views

WordPress plugin column-matic cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.1AI score0.00361EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•21 views

PT-2023-23885 · Twinpictures · Twinpictures Column-Matic Plugin

Name of the Vulnerable Software and Affected Versions: Twinpictures Column-Matic plugin versions 1.3.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with contributor or higher permissions. This vulnerability allow...

6.5CVSS5.5AI score0.00361EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/04 12:00 a.m.•4 views

CVE-2023-32578: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

6.5CVSS6AI score0.00361EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/09/01 12:00 a.m.•31 views

WordPress Multi-column Tag Map Plugin <= 17.0.26 is vulnerable to Broken Access Control

Software Multi-column Tag Map Type Plugin Vulnerable versions = 17.0.26 Fixed in 17.0.27 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41651 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 543c5fba661a Credits Rio Darmawan Require...

6.5CVSS6.6AI score0.00486EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2023/08/30 2:15 p.m.•11 views

CVE-2023-41539

phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...

7.5CVSS7.2AI score0.00672EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•4 views

CVE-2023-41539: Improper Neutralization of Special Elements used in an SQL Command

phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...

7.5CVSS7.3AI score0.00672EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•18 views

Business Directory Script SQL注入漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A security vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from the vulnerability to SQL injection via the column parameter...

7.5CVSS7.6AI score0.00672EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/08/28 1:15 p.m.•10 views

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS7.5AI score0.03682EPSS
SaveExploits0References5
OSV
OSV
•added 2023/08/28 1:15 p.m.•18 views

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS5.8AI score0.03682EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/28 12:00 a.m.•7 views

CVE-2023-40749: Improper Neutralization of Special Elements used in an SQL Command

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS8.2AI score0.03682EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/08/28 12:00 a.m.•23 views

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...

9.8CVSS8.7AI score0.03682EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/08/28 12:00 a.m.•6 views

PT-2023-27614

Name of the Vulnerable Software and Affected Versions PHPJabbers Food Delivery Script version 3.0 Description The issue is related to SQL Injection in the column parameter of "index.php". This allows for potential exploitation. No information is provided about the estimated number of potentially...

9.8CVSS5.8AI score0.03682EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2023/08/11 12:00 a.m.•21 views

Daylight Studio Fuel CMS SQL Injection Vulnerability

Daylight Studio Fuel CMS is a content management system based on CodeIgniter. A security vulnerability exists in Daylight Studio Fuel CMS version 1.4.9, which stems from an SQL injection vulnerability in the file Basemodulemodel.php that allows remote attackers to execute arbitrary code via the c...

8.8CVSS8.7AI score0.01378EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/10 5:15 p.m.•15 views

CVE-2023-36311

There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

9.8CVSS5.8AI score0.00787EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/08/10 5:15 p.m.•10 views

CVE-2023-36311

There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

9.8CVSS7.4AI score0.00787EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2023/08/10 5:15 p.m.•9 views

CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

6.1CVSS6.4AI score0.00444EPSS
SaveExploits0References4
OSV
OSV
•added 2023/08/10 5:15 p.m.•15 views

CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

6.1CVSS5.8AI score0.00444EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/10 12:00 a.m.•13 views

PT-2023-25527 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a SQL injection SQLi vulnerability in the column parameter of the "index.php" endpoint. This issue allows for potential exploitation by injecting malicious SQL code. Recommendation...

9.8CVSS9.5AI score0.00787EPSS
SaveExploits0References6
Rows per page
Query Builder