13364 matches found
CVE-2022-30455
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deletecourtrental, id...
CVE-2022-30455
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deletecourtrental, id...
CVE-2022-30454
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...
Room-rent-portal-site SQL注入漏洞
Room-rent-portal-site is a room for rent portal by the individual developer Carlo Montero. A security vulnerability exists in Room-rent-portal-site v1.0, which stems from an SQL injection issue in /rrps/classes/Master.php?f=deletecategory...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system. SQL injection vulnerability exists in Automotive Shop Management System v1.0. The vulnerability can be exploited by attackers to conduct SQL injection attacks via /asms/classes/Master.php?f=deleteproduct...
Water-billing-management-system SQL注入漏洞
Water-billing-management-system is a water billing management system. SQL injection vulnerability exists in Water-billing-management-system v1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via /wbms/classes/Master.php?f=deleteclient...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. merchandise Online Store version 1.0 is vulnerable to SQL injection, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=delete product to conduct SQL injection attacks...
ChatBot Application with a Suggestion Feature SQL注入漏洞
ChatBot Application with a Suggestion FeatureA ChatBot application with a suggestion feature. chatBot Application with a Suggestion Feature v1.0 is vulnerable to a SQL injection vulnerability in /simple chatbot/classes/Master.php?f=deleteresponse, id is missing validation for external input SQL...
WordPress Spiffy Calendar plugin insecure direct object reference vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Spiffy Calendar plugin 4.9.0 and earlier versions are vulnerable to an insecure direct object...
PT-2022-20126 · Unknown · Chatbot App With Suggestion In Php/Oop
Name of the Vulnerable Software and Affected Versions: ChatBot App with Suggestion in PHP/OOP version 1.0 Description: The issue concerns SQL Injection via the "/simple chat bot/classes/Master.php" endpoint, specifically when the f parameter is set to "delete response" and the id variable is...
Badminton Center Management System SQL注入漏洞
Badminton Center Management System is a badminton center management system. It provides an online and automated platform for badminton centers to manage their daily transactions and records. sql injection vulnerability exists in Badminton Center Management 1.0. An attacker can exploit this...
ROS-20220524-03
The cURL command-line utility vulnerability is related to the -no-clobber toolkit, which is used in conjunction with --remove-on-error. Exploitation of the vulnerability could allow an attacker acting remotely, trick the victim into connecting to a malicious server and forcing the command-line to...
WordPress Core Control plugin <= 1.2.1 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability was discovered by Daniel Ruf in the WordPress Core Control plugin versions = 1.2.1. Solution Deactivate and delete. This plugin has been closed as of May 18, 2022 and is not available for download. This closure is permane...
WordPress Auto Delete Posts plugin <= 1.3.0 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Daniel Ruf in WordPress Auto Delete Posts plugin versions = 1.3.0. Solution Deactivate and delete. This plugin has been closed as of May 18, 2022 and is not available for download. This closure is temporary,...
WordPress Static Page eXtended plugin <= 2.1 - Arbitrary Settings Update via CSRF leading to Stored XSS
Arbitrary Settings Update via CSRF leading to Stored XSS discovered by Daniel Ruf in WordPress Static Page eXtended plugin versions = 2.1. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for download. This closure is temporary, pending a full...
WordPress Sticky Popup plugin <= 1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Saeed Alzahrani in WordPress Sticky Popup plugin versions = 1.2. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for download. This closure is temporary, pending a full...
WordPress Peter’s Collaboration E-mails plugin <= 2.2.0 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Daniel Ruf in WordPress Peter’s Collaboration E-mails plugin versions = 2.2.0. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for download. This closure i...
WordPress Genki Pre-Publish Reminder plugin <= 1.4.1 - Stored XSS and RCE via CSRF vulnerability
Stored XSS and RCE via CSRF vulnerability discovered by Daniel Ruf in WordPress Genki Pre-Publish Reminder plugin versions = 1.4.1. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for download. This closure is temporary, pending a full review...
