org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

CVE-2022-34188

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

Travel Website SQL Injection Vulnerability

Travel Website is a PHP-based travel website. A SQL injection vulnerability exists in Travel Website v1.0, which occurs when the hotelIDHidden parameter on the generateReceipt.php page is processed without filtering the data and sent to the database for processing...

grafana: Spoofing of the originalUrl parameter of snapshots

A flaw was found in the grafana package. While creating a snapshot, an attacker may manipulate a hidden HTTP parameter to inject a malicious URL in the "Open original dashboard" button...

USN-6293-1: OpenStack Heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

IBM: RXSS in hidden parameter

RXSS in hidden parameter was reported to IBM, analyzed, and has been remediated. The vulnerability was a reflected cross-site scripting issue found in a hidden parameter...

Code injection

An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page...

PT-2023-11568 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.10-dev2 Description: The issue allows a remote attacker to execute arbitrary php code via the hidden parameter to "admin.php" when editing a page. Recommendations: For Pluck CMS version 4.7.10-dev2, as a temporary...

CVE-2020-20918

An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page...

CVE-2020-20918: Improper Control of Generation of Code

An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page...

Pluck CMS code injection vulnerability

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck CMS version 4.7.10-dev2, which originates from a vulnerability that allows an attacker to execute arbitrary php code via the hidden parameter of admin.php while editing a page...

USN-6066-1 heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...