Lucene search
+L

278 matches found

Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•16 views

PT-2025-6947 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Freightquote Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology LTL Freight Quotes – FreightQuote Edition versions 2.3.11 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem can be...

9.3CVSS9.8AI score0.00361EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/02/16 12:00 a.m.•12 views

WordPress plugin LTL Freight Quotes – FreightQuote Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin LTL Freigh...

9.3CVSS8.8AI score0.00361EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•24 views

PT-2025-6948 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology LTL Freight Quotes – Worldwide Express Edition versions 5.0.20 and earlier Description: The issue allows exploitation of incorrectly configured access control security levels due to a lack of authorization. This problem can ...

5.3CVSS9.4AI score0.003EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/16 12:00 a.m.•3 views

CVE-2025-22284: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through ...

7.1CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/15 11:26 a.m.•5 views

CVE-2024-13488 LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection

The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

7.5CVSS7.7AI score0.01146EPSS
SaveExploits3References4
CVE
CVE
•added 2025/02/15 11:26 a.m.•78 views

CVE-2024-13488

The CVE-2024-13488 entry describes an unauthenticated SQL Injection in the WordPress plugin LTL Freight Quotes – Estes Edition up to version 3.3.7, caused by insufficient escaping of the dropship_edit_id/edit_id parameters and lack of proper query preparation. This enables attackers to append add...

7.5CVSS7.6AI score0.01146EPSS
SaveExploits3References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/15 12:00 a.m.•2 views

CVE-2024-13488: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

7.5CVSS5.7AI score0.01146EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2025/02/15 12:00 a.m.•15 views

PT-2025-6552 · WordPress · Ltl Freight Quotes – Estes Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Estes Edition plugin for WordPress versions up to, and including, 3.3.7 Description: The issue allows unauthenticated attackers to perform SQL Injection via the dropship edit id and edit id parameters due to insufficient...

7.5CVSS10AI score0.01146EPSS
SaveExploits3References10
CNNVD
CNNVD
•added 2025/02/15 12:00 a.m.•15 views

WordPress plugin LTL Freight Quotes – Estes Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.5CVSS8AI score0.01146EPSS
SaveExploits3References5
Patchstack
Patchstack
•added 2025/02/14 10:44 p.m.•16 views

WordPress LTL Freight Quotes – Estes Edition plugin <= 3.3.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Estes Edition versions = 3.3.7...

7.5CVSS8.1AI score0.01146EPSS
SaveExploits3References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/14 11:27 a.m.•25 views

CVE-2024-13477

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

9.8CVSS9.6AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/14 11:24 a.m.•20 views

CVE-2024-13480

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

7.5CVSS9.6AI score0.00442EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/14 9:50 a.m.•18 views

CVE-2024-13473

The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.5CVSS9.6AI score0.00498EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/12 1:06 p.m.•13 views

WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Unishippers Edition versions = 2.5.8...

9.8CVSS8.1AI score0.00576EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/02/12 12:15 p.m.•22 views

CVE-2024-13477

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

9.8CVSS0.00576EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/12 12:15 p.m.•23 views

CVE-2024-13480

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

7.5CVSS0.00442EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/12 12:15 p.m.•12 views

CVE-2024-13477

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

9.8CVSS5.8AI score0.00576EPSS
SaveExploits0References3
CVE
CVE
•added 2025/02/12 11:11 a.m.•76 views

CVE-2024-13480

CVE-2024-13480 affects the WordPress plugin “LTL Freight Quotes – For Customers of FedEx Freight”. The vulnerability is an unauthenticated SQL Injection in versions up to 3.4.1, caused by insufficient escaping of user-supplied inputs and inadequate query preparation for the edit_id and dropship_e...

7.5CVSS7.7AI score0.00442EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/02/12 11:11 a.m.•26 views

CVE-2024-13480 LTL Freight Quotes – For Customers of FedEx Freight <= 3.4.1 - Unauthenticated SQL Injection

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

7.5CVSS0.00442EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/12 11:11 a.m.•24 views

CVE-2024-13477 LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Unauthenticated SQL Injection

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

7.5CVSS0.00576EPSS
SaveExploits0References3
Rows per page
Query Builder