Lucene search
+L

3 matches found

Patchstack
Patchstack
added 2022/02/10 12:0 a.m.93 views

WordPress WP Statistics plugin <= 13.1.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered in WordPress WP Statistics plugin versions = 13.1.4 by Cyku Hong DEVCORE. Solution Update the WordPress WP Statistics plugin to the latest available version at least 13.1.5...

9.8CVSS2.1AI score0.5346EPSS
SaveExploits3References4Affected Software1
Github Security Blog
Github Security Blog
added 2020/10/02 4:22 p.m.85 views

Potential Remote Code Execution vulnerability

Packages nette/application versions prior to 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette versions prior to 2.0.19 and 2.1.13 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Reported by Cyku Hong from DEVCORE...

9.8CVSS3.8AI score0.35228EPSS
SaveExploits3References8Affected Software1
OSV
OSV
added 2020/10/02 4:22 p.m.41 views

GHSA-8GV3-3J7F-WG94 Potential Remote Code Execution vulnerability

Packages nette/application versions prior to 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette versions prior to 2.0.19 and 2.1.13 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Reported by Cyku Hong from DEVCORE...

8.7CVSS9.7AI score0.35228EPSS
SaveExploits3References8
Rows per page
Query Builder