PT-2024-36438 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /teacher signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database through...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit this vulnerability to gain unauthorized access to the database by executing arbitrary SQL commands via the...

PT-2024-36443 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL Injection issue was found in the /remove sent message.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database via...

CVE-2024-11729

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'servicelist0serviceid' parameter of the getwidgetpaymentoptions AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter an...

PT-2024-16578 · WordPress · Flixita

Name of the Vulnerable Software and Affected Versions: Flixita theme for WordPress versions up to, and including, 1.0.82 Description: The issue is related to Reflected Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This allows unauthenticated...

WordPress Flixita theme <= 1.0.82 - Reflected Cross-Site Scripting via id Parameter vulnerability

Reflected Cross-Site Scripting via id Parameter vulnerability discovered by vgo0 in WordPress Theme Flixita versions = 1.0.82...

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

PT-2024-35751 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA version 3.2.0 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities in the /configuracao/meio pagamento.php component. Attackers can execute arbitrary web scripts or HTML via a crafted payload injected...

CVE-2024-53471

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/meiopagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version v3.2.0. An attacker can exploit the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload with the id or name...

Code-Projects Farmacia 注入漏洞

Code-Projects Farmacia is a content management system from Code-Projects open source. An injection vulnerability exists in Code-Projects Farmacia version 1.0, which stems from a parameter id in the file /visualizar-produto.php that can lead to SQL injection...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

CVE-2024-53505

Siyuan 3.1.11 is affected by a SQL injection in the /getAssetContent API via the id parameter. Root cause: unsanitized id leads to injection; impact per CVSS v3.1 is CRITICAL (Confidentiality, Integrity, Availability) with a base score of 9.8. No patch details are provided in the documents; a pra...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

CVE-2024-53505

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent...

WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter vulnerability

Authenticated Administrator+ SQL Injection via postid Parameter vulnerability discovered by kr0d in WordPress Plugin Internal Linking for SEO traffic & Ranking – Auto internal links 100% automatic versions = 1.2.1...

PT-2024-16698 · WordPress · Internal Linking For Seo Traffic & Ranking – Auto Internal Links

Name of the Vulnerable Software and Affected Versions: Internal Linking for SEO traffic & Ranking – Auto internal links plugin for WordPress versions up to 1.2.1 Description: The issue is related to a time-based SQL Injection vulnerability via the post id parameter. This vulnerability is caused b...

Exploit for CVE-2024-9441

CVE-2024-9441-POC CVE-2024-9441 is a command injection vulner...

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack version v13.12.9934.54690. An attacker exploiting this vulnerability could inject malicious JavaScript into a...