CVE-2024-9102 phpLDAPadmin: Improper Neutralization of Formula Elements

phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value CSV file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet...

CVE-2024-55975 WordPress Dr Affiliate plugin <= 1.2.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rohit Urane Dr Affiliate allows SQL Injection.This issue affects Dr Affiliate: from n/a through 1.2.3...

CVE-2024-55985 WordPress YDS Support Ticket System plugin <= 1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ydesignservices YDS Support Ticket System yds-support-ticket-system allows SQL Injection.This issue affects YDS Support Ticket System: from n/a through = 1.0...

Amiro.CMS 安全漏洞

Amiro.CMS is a commercial content management system from Amiro.CMS, Inc. A security vulnerability exists in Amiro.CMS versions prior to 7.8.4 that stems from improper neutralization of special elements and is vulnerable to cross-site scripting attacks...

WordPress plugin Saksh Escrow System SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

CVE-2024-31668

CVE-2024-31668 affects rizin prior to v0.6.3, due to Improper Neutralization of Special Elements via the meta_set function in librz/analysis/meta. The linked documents confirm this is a rizin-related issue and tie it to Fedora advisories referencing rizin updates (e.g., Fedora 40/41 advisories an...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

WordPress plugin WP Simple Pay Lite Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2024-54345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 Bicycleshop bicycleshop allows DOM-Based XSS.This issue affects Bicycleshop: from n/a through = 1.5...

CVE-2024-54335

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImmoSoft ImmoToolBox Connect immotoolbox-connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through = 1.3.3...

CVE-2024-54319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kundgenerator Kundgenerator kundgenerator allows Reflected XSS.This issue affects Kundgenerator: from n/a through = 1.0.6...

CVE-2024-54258

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anzar Ahmed Ni CRM Lead ni-crm-lead allows SQL Injection.This issue affects Ni CRM Lead: from n/a through = 1.3.0...

CVE-2024-54292

CVE-2024-54292 affects the WordPress Appsplate plugin

CVE-2024-54243

CVE-2024-54243 concerns the WordPress Echoza plugin where improper input neutralization during web page generation leads to a stored XSS (Echoza &lt;= 0.1.1). The vulnerability affects Echoza versions up to 0.1.1 and is documented across multiple feeds as Cross-Site Scripting with Stored XSS impa...

CVE-2024-11837

Improper Neutralization of Special Elements used in an N1QL Command 'N1QL Injection' vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11837 N1QL Injection

Improper Neutralization of Special Elements used in an N1QL Command 'N1QL Injection' vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

PT-2024-36112 · Unknown · Limit Login Attempts

Name of the Vulnerable Software and Affected Versions: Limit Login Attempts versions n/a through 5.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

CVE-2024-8179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled...