Lucene search
+L

11773 matches found

OSV
OSV
added 2023/12/31 9:15 a.m.12 views

CVE-2023-7130

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

8.8CVSS5.6AI score0.00743EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/31 9:15 a.m.30 views

Sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

5.8CVSS7.6AI score0.00743EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/31 8:48 a.m.45 views

CVE-2023-7130 code-projects College Notes Gallery login.php sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

6.3CVSS9.2AI score0.00743EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/31 8:48 a.m.57 views

CVE-2023-7130

The CVE-2023-7130 entry concerns code-projects College Notes Gallery 2.0 where an SQL injection affects an unknown functionality in login.php via the manipulated user parameter. Multiple connected sources confirm a SQLi vulnerability with public exploit availability and classify it as critical. T...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/12/31 12:00 a.m.22 views

College Notes Gallery SQL Injection Vulnerability

College Notes Gallery is a personal blog. code-projects College Notes Gallery version 2.0 suffers from a SQL injection vulnerability that stems from the parameter user in the file login.php that causes SQL injection...

8.8CVSS8AI score0.00743EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/12/31 12:00 a.m.12 views

PT-2023-32891 · Unknown · Code-Projects College Notes Gallery

Name of the Vulnerable Software and Affected Versions: code-projects College Notes Gallery version 2.0 Description: A critical vulnerability has been found in the code-projects College Notes Gallery, affecting an unknown functionality of the file login.php. The manipulation of the user argument...

8.8CVSS8.1AI score0.00743EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2023/12/31 12:00 a.m.9 views

Tecno Camon Security Breach

The Tecno Camon is a Camon series smartphone from China-based Transocean. A security vulnerability exists in Tecno Camon X CA7 Gallery3d, which originates from a vulnerability that allows attackers to bypass the Gallary3D hidden image feature in TECNO Camon X. The vulnerability is caused due to t...

2.1CVSS6.7AI score0.00281EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2023/12/30 11:15 a.m.6 views

vallejogallery.com Cross Site Scripting vulnerability OBB-3826622

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2023/12/29 11:15 a.m.9 views

CVE-2023-51373

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ian Kennerley Google Photos Gallery with Shortcodes allows Reflected XSS.This issue affects Google Photos Gallery with Shortcodes: from n/a through 4.0.2...

6.1CVSS5.8AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/29 11:15 a.m.21 views

CVE-2023-51373

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ian Kennerley Google Photos Gallery with Shortcodes allows Reflected XSS.This issue affects Google Photos Gallery with Shortcodes: from n/a through 4.0.2...

7.1CVSS0.00343EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/29 11:15 a.m.26 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ian Kennerley Google Photos Gallery with Shortcodes allows Reflected XSS.This issue affects Google Photos Gallery with Shortcodes: from n/a through 4.0.2...

5.8CVSS7.1AI score0.00343EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/29 10:55 a.m.66 views

CVE-2023-51373

CVE-2023-51373 refers to a Reflected XSS in the Google Photos Gallery with Shortcodes WordPress plugin (affected up to 4.0.2). The root cause is improper neutralization of input during web page generation. Impact could be browser-executed payloads if exploited. Remediation: upgrade to 4.0.2 (or l...

7.1CVSS7.1AI score0.00343EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.11 views

WordPress Plugin Google Photos Gallery with Shortcodes Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00343EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/12/21 12:00 a.m.21 views

WordPress Photo Gallery by 10Web Plugin <= 1.8.18 is vulnerable to Cross Site Scripting (XSS)

Software Photo Gallery by 10Web Type Plugin Vulnerable versions = 1.8.18 Fixed in 1.8.19 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6924 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0bcf8b758508 Credits István Márton...

4.8CVSS6AI score0.00461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/21 12:00 a.m.13 views

The vulnerability of the User Post Gallery plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the User Post Gallery plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.42723EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2023/12/20 6:15 p.m.9 views

CVE-2023-28491

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6...

7.2CVSS7.3AI score0.00762EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/20 6:15 p.m.27 views

CVE-2023-28491

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6...

7.2CVSS0.00762EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/20 6:15 p.m.24 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6...

5.8CVSS7.9AI score0.00762EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/20 5:23 p.m.60 views

CVE-2023-28491

CVE-2023-28491 describes an SQL Injection in the WordPress plugin Slideshow Gallery LITE (Tribulant Slideshow Gallery LITE) for versions

7.2CVSS7.8AI score0.00762EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.10 views

PT-2023-21756 · Tribulant · Tribulant Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: Tribulant Slideshow Gallery LITE versions 1.7.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation ...

7.2CVSS7.5AI score0.00762EPSS
SaveExploits0References5
Rows per page
Query Builder