CVE-2022-0236: Missing Authorization

The WP Import Export WordPress plugin both free and premium versions is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpieprocessfiledownload found in the /includes/classes/class-wpie-general.php file. This made it possible for...

CVE-2021-24909: Improper Neutralization of Input During Web Page Generation

The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the includes/acfphotogallerymetaboxedit.php file before outputing back in an attribute, leading to a Reflected Cross-Site Scripting issue...

apply.umgc.edu Cross Site Scripting vulnerability OBB-2309583

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Employee Record Management System Directory Traversal Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System has a directory traversal vulnerability that originates from a directory traversal vulnerability in the admin/includes/ file, which can be exploited by an attacker to retrieve and download...

CVE-2021-39314

The WooCommerce EnvioPack WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dataid parameter found in the /includes/functions.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WooCommerce EnvioPack plugin is a WordPress open source application plugin.The WordPress WooCommerce EnvioPack plugin h...

CVE-2021-44965

Directory traversal vulnerability in /admin/includes/ directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server...

CVE-2021-44965

Directory traversal vulnerability in /admin/includes/ directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server...

CVE-2021-44965: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in /admin/includes/ directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server...

PHPGURUKUL Employee Record Management System: Path traversal vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System has a directory traversal vulnerability that originates from a directory traversal vulnerability in the admin/includes/ file, which can be exploited by an attacker to retrieve and download...

PT-2021-24186 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Employee Record Management System version 1.2 Description: The issue allows an attacker to perform a directory traversal attack in the /admin/includes/ directory. This enables the retrieval and download of sensitive information fro...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path traversal vulnerability in includes/html/pages/device/showconfig.inc.php, enabling manipulation of the requested path to access files outside the intended directory. Multiple connected advisories (GHSA-7289-CHWJ-7H86, OSV:GHSA-7289-CHWJ-7H86, CNVD/CNNVD, Ver...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

PT-2021-24077

Name of the Vulnerable Software and Affected Versions: Librenms version 21.11.0 Description: The issue is related to a path manipulation vulnerability. It affects the includes/html/pages/device/showconfig.inc.php file. Recommendations: For Librenms version 21.11.0, at the moment, there is no...

CVE-2021-44278: Improper Limitation of a Pathname to a Restricted Directory

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44277

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

CVE-2021-44279

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

CVE-2021-44277: Improper Neutralization of Input During Web Page Generation

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...