WordPress plugin LTL Freight Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2024-13473: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

PT-2025-6550 · WordPress · Ltl Freight Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Unishippers Edition plugin for WordPress versions up to, and including, 2.5.8 Description: The issue is related to SQL Injection via the edit id parameter due to insufficient escaping on the user-supplied parameter and la...

CVE-2024-13477: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

WordPress LTL Freight Quotes – For Customers of FedEx Freight plugin <= 3.4.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – For Customers of FedEx Freight versions = 3.4.1...

WordPress LTL Freight Quotes – XPO Edition plugin <= 4.3.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – XPO Edition versions = 4.3.7...

CVE-2025-24664

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

CVE-2025-24664

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

CVE-2025-24664

CVE-2025-24664 is an SQL Injection vulnerability in the WordPress plugin “LTL Freight Quotes – Worldwide Express Edition” (affected: 5.0.20 and earlier). The issue arises from improper neutralization of user input in SQL commands, enabling SQL injection with a high impact on confidentiality and p...

CVE-2025-24664 WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

CVE-2025-24664 WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eniture Technology LTL Freight Quotes – Worldwide Express Edition allows SQL Injection. This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.0.20...

WordPress plugin LTL Freight Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2025-24664: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Worldwide Express Edition versions = 5.0.20...

daytonfreight.com Cross Site Scripting vulnerability OBB-3774448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

unitedfreightglobal.com Cross Site Scripting vulnerability OBB-3057465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Oracle Transportation Management Information Disclosure Vulnerability (CNVD-2023-86061)

Oracle Transportation Management Otm is a tool for shippers and logistics providers from Oracle. It is used to provide transportation planning and execution capabilities and to integrate transportation planning, execution, freight payment and business process automation into one application acros...

artemidefreightallocator.fr Cross Site Scripting vulnerability OBB-2838718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in browserslist-config-freight-trust (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf366bc353ddcabf5a3692641c29f85b696be961bd78264a847de2ae63fd0043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SQL Injection Vulnerability in Freight Forwarding Quotation System of Shenzhen Yonglian Tong Industry Co.

Shenzhen Yongliantong Industrial Co., Ltd. was established in 2000, which is a modernized and comprehensive import and export foreign trade company approved by the Ministry of Foreign Trade and Economic Cooperation. There is a SQL injection vulnerability in the freight forwarding quotation system...