PT-2024-15613

Name of the Vulnerable Software and Affected Versions Kashipara Billing Software version 1.0 Description A critical issue affects the processing of the file item list edit.php in the HTTP POST Request Handler component. The manipulation of the id argument leads to SQL injection. This issue can be...

PT-2013-4261

Name of the Vulnerable Software and Affected Versions WP Ultimate Email Marketer plugin version 1.1.0 and possibly earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different PHP files. The affected parameters include: - siteurl...

PT-2013-4262

Name of the Vulnerable Software and Affected Versions WP Ultimate Email Marketer plugin version 1.1.0 and possibly earlier Description The issue concerns improper access restriction to certain API endpoints, specifically "list/edit.php" and "campaign/editCampaign.php", allowing remote attackers t...

CVE-2013-3264: Undefined Security Weakness

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...