Sql injection

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

CVE-2021-43408

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

CVE-2021-43408

Summary (CVE-2021-43408) : The WordPress plugin “Duplicate Post” (versions up to 1.1.9) is vulnerable to SQL Injection via an authenticated user with plugin access. The root cause is improper sanitization/escaping of SQL statements when the cdp_action_handling AJAX action processes the id paramet...

CVE-2021-43408 Duplicate Post WordPress Plugin SQL Injection Vulnerability

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

WordPress plugin SQL injection vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin. The WordPress plugin Duplicate Post version 1.1.9 suffers...

CVE-2021-43408: Improper Neutralization of Special Elements used in an SQL Command

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

PT-2021-23835

Name of the Vulnerable Software and Affected Versions Duplicate Post WordPress plugin version 1.1.9 and earlier Description The issue occurs due to SQL injection vulnerabilities, which happen when client-supplied data is included within an SQL query insecurely. This can be exploited to read,...

Missing duplicate veto check

Handle defsec Vulnerability details Impact On the GovernorAlpha contract, function veto has been added. Although the function behaviour is expected, duplicate veto process has not been checked on that function. Proof of Concept 1. Navigate to following contract line. function vetouint256...

PT-2021-8167 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the perf env insert btf function when a duplicate BTF id is encountered. This function does not insert the duplicate id and causes a memory lea...

Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack

Description Login CSRF via /register/confirm/token endpoint. Proof of Concept 1: Register account with the same username as our victim, an email confirmation will take place 2: Retrieve token from email. 3: Send a link http://BOOKSTACKAPPURL/register/confirm/token to user. 4: When the user clicks...

CVE-2021-3896

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43389. Reason: This candidate is a reservation duplicate of CVE-2021-43389. Notes: All CVE users should reference CVE-2021-43389 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2021-3896

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43389. Reason: This candidate is a reservation duplicate of CVE-2021-43389. Notes: All CVE users should reference CVE-2021-43389 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2021-3896

CVE-2021-43389 is a Linux kernel vulnerability tracked across multiple advisories. Connected documents confirm an array-index-out-of-bounds flaw in the ISDN CAPI in kcapi.c (detach_capi_ctr) within the kernel’s CAPI/ISDN stack, leading to an out-of-bounds read and potential object type confusion....

PT-2021-22334 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue, as it refers to a duplicate candidate that has been removed to prevent accidental usage. It mentions...

CVE-2021-43338

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43339. Reason: This candidate is a duplicate of CVE-2021-43339. Notes: All CVE users should reference CVE-2021-43339 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

UBUNTU-CVE-2018-6044

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16064. Reason: This candidate is a reservation duplicate of CVE-2018-16064. Notes: All CVE users should reference CVE-2018-16064 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2018-6059

CVE-2018-6059 is a reservation/duplicate of CVE-2017-11225 and has been superseded; the description explicitly states this candidate should reference CVE-2017-11225 and that all references/descriptions for 2018-6059 were removed to prevent usage. The connected CVE-2017-11225 entry describes a use...

CVE-2018-6058

CVE-2018-6058 is rejected/duplicate; reference CVE-2017-11215 instead.

CVE-2018-6044

CVE-2018-6044 is a reservation duplicate of CVE-2018-16064. The concrete details come from CVE-2018-16064: Insufficient data validation in the Google Chrome Extensions API prior to 68.0.3440.75 allowed a user-assisted attacker to bypass navigation restrictions via a crafted Chrome Extension. Affe...

CVE-2021-41748

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-41874. Reason: This candidate is a duplicate of CVE-2021-41874. Notes: All CVE users should reference CVE-2021-41874 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...