59 matches found
folio-migration-tools (>=1.0.2, <=1.5.0), lore (0.5.13) +1 more potentially affected by CVE-2025-47273 via setuptools (60.6.0)
setuptools PYPI version 60.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - folio-migration-tools =1.0.2, =1.10.0, =1.11.17 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...
lore (0.5.12) potentially affected by CVE-2024-6345 via setuptools (60.7.0)
setuptools PYPI version 60.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - lore 0.5.12 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...
folio-migration-tools (>=1.0.2, <=1.5.0), lore (0.5.13) +1 more potentially affected by CVE-2024-6345 via setuptools (60.6.0)
setuptools PYPI version 60.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - folio-migration-tools =1.0.2, =1.10.0, =1.11.17 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...
folio-migration-tools (>=1.0.2, <=1.5.0), lore (0.5.13) +1 more potentially affected by CVE-2022-40897 via setuptools (60.6.0)
setuptools PYPI version 60.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - folio-migration-tools =1.0.2, =1.10.0, =1.11.17 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...
lore (0.5.12) potentially affected by CVE-2022-40897 via setuptools (60.7.0)
setuptools PYPI version 60.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - lore 0.5.12 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...
lore (0.5.12) potentially affected by CVE-2022-40897 via setuptools (60.7.0)
setuptools PYPI version 60.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - lore 0.5.12 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...
lore-seichter-murath.de Cross Site Scripting vulnerability OBB-2700328
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
consreg (>=1.1.0, <=1.1.7), deeppavlov (>=0.0.5.1, <=0.0.5.3) +5 more potentially affected by CVE-2020-13091 via pandas (0.21.1)
pandas PYPI version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on pandas and may be impacted: - consreg =1.1.0, =0.0.5.1, =1.2.0, =0.4.36, =0.0.1rc0, =0.0.1rc1 - pyplanet 0.5.4 - sqlep 0.0.1 Source cves: CVE-2020-13091 Source advisory:...
Lore 1.5.4/1.5.6 'article.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15665/info Lore is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Lore 1.5.6 (article.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================== Lore 1.5.6 article.php Blind SQL Injection Exploit ==================================================== Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork ...
Lore 1.5.6 - article.php Blind SQL Injection
Lore 1.5.6 - article.php Blind SQL Injection Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias...
Lore 1.5.6 - 'article.php' Blind SQL Injection
Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias C1c4tr1z,Tecn0x,Lix,1995,N0b0dy,NanonRoses,Codebreak?,Nork,AzraelNuKE && Todos los Miembros de...
Lore 1.5.6 (article.php) Blind SQL Injection Exploit
No description provided by source. ? / CURL HABILITADO Blind Sql Injections Script Version : Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias...
Lore 1.5.6 SQL Injection
Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias C1c4tr1z,Tecn0x,Lix,1995,N0b0dy,NanonRoses,Codebreak?,Nork,AzraelNuKE && Todos los Miembros de...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2008-3353
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2008-3353
CVE-2008-3353 affects Pure Software Lore, prior to version 1.7.0. The Connected PT-2008-4758 entry documents multiple cross-site scripting (XSS) vulnerabilities in the article comments feature and the search log feature, allowing remote attackers to inject arbitrary web script or HTML. Root cause...
CVE-2008-3353
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2008-3353: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...
CVE-2007-2021
Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 langpath parameter to thirdparty/phpmailer/class.phpmailer.php or the 2 getpluginfilepath parameter to...