70 matches found
WordPress plugin WP Inquiries SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
Online Railway Reservation System 访问控制错误漏洞
Online Railway Reservation System is an online railroad reservation system by adminastro individual developers. An access control error vulnerability exists in version 1.0 of the Online Railway Reservation System, which stems from an improper access control issue with the id parameter in the...
CVE-2024-7852
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiate...
Yoga Class Registration System 跨站脚本漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the Yoga Class Registration System, which stems from some unknown handling of the file /admin/inquiries/viewinquiry.php, where...
US Leaders Dodge Questions About Israel’s Influence Campaign
Democratic leader Hakeem Jeffries has joined US intelligence officials in ignoring repeated inquiries about Israel’s “malign” efforts to covertly influence US voters...
inquiriesjournal.com Cross Site Scripting vulnerability OBB-3919188
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-6625
The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not have a CSRF check in place when deleting inquiries, which could allow attackers to make a logged in admin delete them via a CSRF attack...
CVE-2023-30415
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...
CVE-2023-30415
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...
CVE-2023-30415
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...
Sql injection
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...
PT-2023-22682 · Unknown · Sourcecodester Packers/Movers Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Packers and Movers Management System version 1.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/inquiries/view inquiry.php" API endpoint. This vulnerability allows...
Sql injection
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\viewinquiry.php. The manipulation leads to sql injection. The attack can be launched remotely...
Lost and Found Information System SQL注入漏洞
Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which stems from a problem in the file admininquiriesviewinquiry.php that can lead to sql injection...
PT-2023-23457 · Sourcecodester · Sourcecodester Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file admininquiriesview inquiry.php. This issue leads to sql injection and can ...
CVE-2023-2371
A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...
PT-2023-19149 · Unknown · Sourcecodester Online Dj Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online DJ Management System. The issue affects an unknown functionality of the file admin/inquiries/view details.php,...
PT-2023-19405 · Sourcecodester · Sourcecodester Ac Repair/Services System
Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue affects the processing of the file /admin/inquiries/view inquiry.php, where the manipulation of the id argument leads to sql injection. The attack can be...
Helmet Store Showroom Site 跨站脚本漏洞
Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from the presence of cross-site scripting attacks X...