Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure

source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.exe in /scripts/Carello. Accessing...

CVE-2023-26812

CVE-2023-26812 is rejected/not used; this record does not represent an active vulnerability entry.

CVE-2024-1866

CVE-2024-1866 is a duplicate of CVE-2023-2813. Connected data describe a reflected Cross-Site Scripting (XSS) issue affecting multiple WordPress themes (e.g., Aapna, Anand, Anfaust, Arendelle, etc.) where the search box reflects results, enabling an unauthenticated user to trigger XSS by clicking...

CVE-2023-50119

CVE-2023-50119 is a reservation duplicate of CVE-2023-45292; the entry is not to be used. Connected docs confirm CVE-2023-45292 describes a Captcha verification bypass in the default Verify path of base64Captcha, where certain parameter values (non-existent id, empty string, third param true) can...