CVE-2023-34182

A vulnerability in shawfactor LH Password Changer lh-password-changer.This issue affects LH Password Changer: from n/a through = 1.55...

CVE-2023-34182

Cross-Site Request Forgery CSRF vulnerability in Peter Shaw LH Password Changer plugin = 1.55 versions...

CVE-2023-34182 WordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Peter Shaw LH Password Changer plugin = 1.55 versions...

CVE-2023-34182 WordPress LH Password Changer plugin <= 1.55 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in shawfactor LH Password Changer lh-password-changer.This issue affects LH Password Changer: from n/a through = 1.55...

CVE-2023-34182

CVE-2023-34182 is a CSRF vulnerability in the LH Password Changer WordPress plugin for versions up to 1.55. The available connected sources confirm the issue as CSRF affecting unauthenticated users, with referenced CVSS data indicating a high-impact scenario, but no exploit details are provided i...

WordPress Plugin lh-password-changer Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-24721 · Peter Shaw · Lh Password Changer Plugin

Name of the Vulnerable Software and Affected Versions: Peter Shaw LH Password Changer plugin versions = 1.55 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

lh-goeppingen.de Cross Site Scripting vulnerability OBB-3630326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF)

Software LH Password Changer Type Plugin Vulnerable versions = 1.55 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34182 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 19a12f4b7744 Credits Mika Required...

Malicious code in jquery-lh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50689d87596c591d0c3b5868d3e2d376462fc24259cf3e4119424aa4842b0bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4050 Malicious code in jquery-lh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50689d87596c591d0c3b5868d3e2d376462fc24259cf3e4119424aa4842b0bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lh-lh.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lh-lh.ru website and its users. Following coordinated and...

EulerOS Virtualization for ARM 64 3.0.2.0 : libxml2 (EulerOS-SA-2019-1614)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There ...

CVE-2018-1000839

LH-EHR version REL-200 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type...

CVE-2018-1000839

LH-EHR version REL-200 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type...

CVE-2018-1000839

LH-EHR version REL-200 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type...

CVE-2018-1000839

The CVE-2018-1000839 entry concerns LH-EHR REL-2_0_0, which has an Arbitrary File Upload flaw in the Profile picture upload feature that can lead to Remote Code Execution. The exploit path is described as uploading a PHP file with an image MIME type, enabling code execution on the server. Public ...

Arbitrary File Deletion Vulnerability in LibreHealthIO LH-EHR

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file deletion vulnerability exists in the export template in the LibreHealthIO LH-EHR REL-2.0.0 release. An attacker can exploit this vulnerability to cause a denial of servic...

Arbitrary File Write Vulnerability in LibreHealthIO LH-EHR

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file write vulnerability exists in the export template in the LibreHealthIO LH-HER REL-2.0.0 release. An attacker can exploit this vulnerability to write files with malicious...

CVE-2018-1000650

LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...