Sql injection

The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections...

CVE-2022-0814 Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi

The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections...

CVE-2022-0814

CVE-2022-0814 describes a SQL injection vulnerability in the Ubigeo de Perú for Woocommerce WordPress plugin prior to version 3.6.4. The issue arises from improper sanitisation/escaping of parameters in AJAX actions, some accessible without authentication, enabling unauthenticated SQL injection. ...

CVE-2022-0814: Improper Neutralization of Special Elements used in an SQL Command

The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-1675)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress plugin Ubigeo de Peru SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. A SQL injection vulnerability exists in versions of the WordPress Ubigeo de Peru plugin prior to...

PT-2022-13443

Name of the Vulnerable Software and Affected Versions Ubigeo de Perú para Woocommerce WordPress plugin versions prior to 3.6.4 Description The issue arises from the plugin's failure to properly sanitise and escape certain parameters before using them in SQL statements via various AJAX actions. So...

petropolis.rj.gov.br Cross Site Scripting vulnerability OBB-2587259

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kjm2.de Cross Site Scripting vulnerability OBB-2573800

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chateau-de-pisany.com Improper Access Control vulnerability OBB-2573726

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

charles-de-valliere.com Improper Access Control vulnerability OBB-2573697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

voor-de-keuken.nl Cross Site Scripting vulnerability OBB-2566499

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

latelier-de-claire.com Cross Site Scripting vulnerability OBB-2537503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

koka36.de Cross Site Scripting vulnerability OBB-2536859

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

charcuterie-de-boussay.com Cross Site Scripting vulnerability OBB-2533326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Ubigeo de Perú plugin <= 3.6.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress Ubigeo de Perú plugin versions = 3.6.3. Solution Update the WordPress Ubigeo de Perú plugin to the latest available version at least 3.6.4...

heilbronn-2100.de Cross Site Scripting vulnerability OBB-2518328

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Control de Ciber 资源管理错误漏洞

Control de Ciber is a network control software from Ciber Control open source. A security vulnerability exists in Control de Ciber. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

Control de Ciber 资源管理错误漏洞

Control de Ciber is a network control software from Ciber Control open source. A security vulnerability exists in Control de Ciber. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

Control de Ciber 安全漏洞

Control de Ciber is a network control software from Ciber Control open source. A security vulnerability exists in Control de Ciber version 1.650. An attacker exploited the vulnerability to cause a buffer overflow...