Lucene search
+L

7650 matches found

CNNVD
CNNVD
added 2023/12/21 12:00 a.m.6 views

WordPress plugin Menu Image, Icons made easy Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Menu Image, Icons made eas...

5.9CVSS6.1AI score0.00352EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/20 4:15 p.m.10 views

CVE-2023-31092

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a through 1.0.2...

8.1CVSS7.3AI score0.0057EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/20 4:15 p.m.22 views

CVE-2023-31092

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a through 1.0.2...

8.1CVSS0.0057EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/20 4:15 p.m.23 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a through 1.0.2...

5.5CVSS7.9AI score0.0057EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/20 4:06 p.m.44 views

CVE-2023-31092 WordPress Easy Bet Plugin <= 1.0.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a through 1.0.2...

5.5CVSS8.7AI score0.0057EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/20 4:06 p.m.58 views

CVE-2023-31092

The CVE-2023-31092 entry refers to a SQL Injection in the WordPress plugin Easy Bet (Foxskav Easy Bet) that affects versions

8.1CVSS8.6AI score0.0057EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.12 views

PT-2023-23148 · Unknown · Foxskav Easy Bet

Name of the Vulnerable Software and Affected Versions: Foxskav Easy Bet versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows attackers to inject malicious SQL code,...

8.1CVSS8.5AI score0.0057EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/12/20 12:00 a.m.16 views

WordPress Plugin Easy Bet SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Easy Bet suffers from...

8.1CVSS7.7AI score0.0057EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/12/19 12:00 a.m.16 views

WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)

Software Menu Image, Icons made easy Type Plugin Vulnerable versions = 3.10 Fixed in 3.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50826 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e7ae4a05a16b Credits emad Required privilege...

5.9CVSS6.5AI score0.00352EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:00 a.m.12 views

The vulnerability of the APC Easy UPS Online Monitoring Software lies in the incorrect limitation of the path to the restricted directory. This allows a hacker to delete any files they desire.

The vulnerability of the APC Easy UPS Online Monitoring Software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to delete arbitrary files...

5.3CVSS6.5AI score0.00236EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
added 2023/12/16 7:17 p.m.5 views

easy-workplace.de Improper Access Control vulnerability OBB-3816550

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/12/15 12:00 a.m.22 views

Schneider Electric APC Easy UPS Online deletePdfReportFile Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Schneider Electric APC Easy UPS Online. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

5.3CVSS6.6AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 9:15 a.m.26 views

CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

6.1CVSS0.00405EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/14 9:15 a.m.8 views

CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

6.1CVSS5.8AI score0.00405EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/14 9:15 a.m.19 views

Cross site scripting

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

5.8CVSS6.3AI score0.00405EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/14 8:52 a.m.44 views

CVE-2023-40659

Affected product: Easy Quick Contact module for Joomla. Vulnerability: reflected XSS in the Easy Quick Contact module. Root cause: not explicitly detailed beyond a reflected XSS flaw. Impact (per sources): enables cross-site scripting in victims’ browsers; CVSS v3.1 base score 6.1 (MEDIUM) with N...

6.1CVSS6AI score0.00405EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/14 12:00 a.m.10 views

PT-2023-27581 · Joomla · Easy Quick Contact

Name of the Vulnerable Software and Affected Versions: Easy Quick Contact module for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. Recommendations: At the moment, there is no information about a newer...

6.1CVSS6AI score0.00405EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.8 views

Joomla Security Breach

Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Easy Quick Contact module...

6.1CVSS6.2AI score0.00405EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.13 views

Schneider Electric Easy UPS Online Monitoring Software Path Traversal Vulnerability

Schneider Electric Easy UPS Online Monitoring Software is a power monitoring software from Schneider Electric France. A path traversal vulnerability exists in Schneider Electric Easy UPS Online Monitoring Software. An attacker could exploit this vulnerability to cause arbitrary file deletion upon...

7.1CVSS6.8AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/13 12:00 a.m.6 views

PT-2023-26618 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a vulnerability, but details are not provided. A tool is mentioned as being easy to use, and it creates something, but the specifics are not given. There is...

6.5AI score
SaveExploits0References1
Rows per page
Query Builder