PT-2018-5181

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.73.1 and earlier, 2.83 and earlier Description The issue concerns the remote API at "/queue/item/ID/api" which previously showed information about tasks in the queue, including those that the current user had no access to du...

openSUSE: Security Advisory for newsbeuter (openSUSE-SU-2018:0166-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for newsbeuter (important)

This update for newsbeuter fixes one issues. This security issue was fixed: - CVE-2017-12904: Improper neutralization of special elements allowed remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL bsc1054578...

The vulnerability of the CInArchive::ReadFileItem method (Archive/Udf/UdfIn.cpp) in the p7zip archive tool allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the CInArchive::ReadFileItem method Archive/Udf/UdfIn.cpp in the p7zip archive tool is caused by the occurrence of read operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

Google Android LG Bootloader Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.LG Bootloader is one of the bootloaders. A local boost vulnerability exists in DisplayFtmItem of LG Bootloader in Android, which stems from the program reading a string without...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

PT-2017-12704

Name of the Vulnerable Software and Affected Versions PHPJabbers Star Rating Script version 4.0 Description The issue is related to stored XSS, which occurs via a rating item. This allows for the potential execution of malicious scripts. Recommendations For PHPJabbers Star Rating Script version...

CVE-2017-12811: Improper Neutralization of Input During Web Page Generation

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

WordPress Payment Form for PayPal Pro Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Payment Form for PayPal Pro plugin is used in one of the payment plugin. WordPress Payment Form for PayPal Pro...

FS Groupon Clone SQL Injection Vulnerability

FS Groupon Clone is a set of PHP and MySQL based online transaction website scripts. The script supports a wide range of online transactions such as event bookings, travel bookings, merchandise purchases and community services. A SQL injection vulnerability exists in FS Groupon Clone version 1.0....

FS Trademe Clone SQL Injection Vulnerability

FS Trademe Clone is a set of versatile website creation scripts based on PHP and MySQL. The script supports the creation of websites in categories such as auctions, e-commerce, B2B, real estate, job portals and classified ads. A SQL injection vulnerability exists in FS Trademe Clone version 1.0. ...

CVE-2017-17575

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17577

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

Sql injection

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

CVE-2017-17575

FS Groupon Clone 1.0 is affected by a SQL Injection vulnerability in the item_details.php?id parameter and the vendor_details.php?id parameter. The condition is tied to a PHP‑MySQL stack, enabling potentially unauthorized data access through crafted input. Exploit references exist (Exploit-DB: 43...

PT-2017-14870

Name of the Vulnerable Software and Affected Versions FS Groupon Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the "item details.php" or "vendor details.php" API endpoints. Recommendations For FS Groupon Clone version 1.0, avoid usi...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...