485 matches found
PT-2025-6754 · Daylight Studio · Fuel Cms
Name of the Vulnerable Software and Affected Versions: Daylight Studio Fuel CMS version 1.5.2 Description: The issue allows an attacker to escalate privileges through the "fuel/blocks/" and "fuel/pages/" components. This is a Cross Site Scripting issue that can be exploited to gain elevated acces...
CVE-2024-57605
CVE-2024-57605 describes a Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v1.5.2 that allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components. The CVSS 3.1 base score is 5.4 (Medium) with network attack vector, low attack complexity, and privileg...
CVE-2024-8310
OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full admin privileges...
CVE-2024-12513 Contests by Rewards Fuel <= 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Contests by Rewards Fuel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'RFCONTEST' shortcode in all versions up to, and including, 2.0.65 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress plugin Contests by Rewards Fuel 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress Contests by Rewards Fuel plugin <= 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Contests by Rewards Fuel versions = 2.0.65...
CVE-2024-10406
A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/editfuel.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
PT-2024-16249 · Sourcecodester · Sourcecodester Petrol Pump Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/edit fuel.php. The manipulation of the id argument leads to sql...
Petrol Pump Management Software SQL注入漏洞
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from a SQL injection vulnerability contained in the id parameter of the /admin/editfuel.php...
CVE-2024-8310
OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full admin privileges...
CVE-2024-8310
The CVE-2024-8310 issue affects OPW Fuel Management Systems SiteSentinel (pre-17Q2.1) and is a Missing Authentication for a Critical Function vulnerability. The flaw allows an attacker to bypass authentication and gain full admin privileges on the server (attack surface described as network-acces...
CVE-2024-8310 OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function
OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full admin privileges...
CVE-2024-8310 OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function
OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full admin privileges...
Alisonic Sibylla SQL注入漏洞
Alisonic Sibylla is an automated fuel tank metering service station from Alisonic. The Alisonic Sibylla suffers from a SQL injection vulnerability that stems from the device's susceptibility to SQL injection attacks, which could allow full access to the database...
OPW Fuel Managements Systems SiteSentinel 访问控制错误漏洞
OPW Fuel Managements Systems SiteSentinel is a fuel management system from OPW. An access control error vulnerability exists in OPW Fuel Managements Systems SiteSentinel, which stems from the fact that an affected product could allow an attacker to bypass server authentication and gain full...
OPW Fuel Management Systems SiteSentinel
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : OPW Fuel Managements Systems Equipment : SiteSentinel Vulnerability : Missing Authentication For Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could...
Server Misconfiguration at Fuel Industry Software Provider Exposes SSNs, PII Data
A server misconfiguration exposed a trove of documents belonging to FleetPanda, a leading petroleum and fuel industry software…...
Siemens Omnivise T3000 安全漏洞
The Omnivise T3000 is a distributed control system for fossil fuel and large renewable energy power plants. A code execution vulnerability exists in the Siemens Omnivise T3000 Application Server that could be exploited by a local, authenticated attacker to execute arbitrary code with elevated...
Improper Input Validation
@fuel-ts/account is vulnerable to Improper Input Validation. The vulnerability is caused due to the fund function in fuels-ts/packages/account/src/account.ts which gets the needed resources statelessly with the function getResourcesToSpend without taking into consideration already used UTXOs. Thi...