4071 matches found
CVE-2024-11261 SourceCodester Student Record Management System Number of Students Menu StudentRecordManagementSystem.cpp memory corruption
A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the file StudentRecordManagementSystem.cpp of the component Number of Students Menu. The manipulation leads to memory corruption. Attacking local...
CVE-2024-11261 SourceCodester Student Record Management System Number of Students Menu StudentRecordManagementSystem.cpp memory corruption
A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the file StudentRecordManagementSystem.cpp of the component Number of Students Menu. The manipulation leads to memory corruption. Attacking local...
WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WDES Responsive Mobile Menu versions = 5.3.18...
CVE-2024-45878
The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.291, in /Apps/TOPqw/qwStammdaten.aspx, is vulnerable to persistent Cross-Site Scripting XSS...
WordPress WDES Responsive Mobile Menu Plugin <= 5.3.18 is vulnerable to PHP Object Injection
Software WDES Responsive Mobile Menu Type Plugin Vulnerable versions = 5.3.18 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52414 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 3807cf50f771 Credits Mika Required privilege...
baltic-it TOPqw Webportal 安全漏洞
baltic-it TOPqw Webportal is a web application developed by a social service provider of the German company baltic-it. It can be used to publicly view information about various facilities. A security vulnerability exists in baltic-it TOPqw Webportal version v1.35.283.2, which stems from the...
PT-2024-31830 · Baltic It · Topqw Webportal
Name of the Vulnerable Software and Affected Versions: baltic-it TOPqw Webportal versions 1.35.283.2 through 1.35.290 Description: The issue affects the "Stammdaten" menu in the /Apps/TOPqw/qwStammdaten.aspx endpoint, allowing for persistent Cross-Site Scripting XSS. Recommendations: For versions...
CVE-2024-45878
The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.291, in /Apps/TOPqw/qwStammdaten.aspx, is vulnerable to persistent Cross-Site Scripting XSS...
CVE-2024-11097
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to t...
CVE-2024-11097
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to t...
CVE-2024-11097 SourceCodester Student Record Management System Main Menu infinite loop
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to t...
CVE-2024-11097 SourceCodester Student Record Management System Main Menu infinite loop
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to t...
CVE-2024-11097
SourceCodester Student Record Management System 1.0 is affected, specifically the Main Menu component. The issue allows an infinite loop caused by manipulation, with exploitation requiring local access. Public exploits have been disclosed historically across multiple sources, and remediation guid...
PT-2024-16758 · Sourcecodester · Sourcecodester Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Record Management System version 1.0 SourceCodester versions prior to the latest update Description: A vulnerability has been found in the SourceCodester Student Record Management System, affecting the Main Menu...
Ampache 跨站脚本漏洞
Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Logo in the interface section of the Ampache menu...
Ampache 跨站脚本漏洞
Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Favicon in the interface section of the Ampache menu...
CVE-2024-51618
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Admin Menu custom-admin-menu allows Stored XSS.This issue affects Custom Admin Menu: from n/a through = 1.0.0...
CVE-2024-51618 WordPress Custom Admin Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Admin Menu custom-admin-menu allows Stored XSS.This issue affects Custom Admin Menu: from n/a through = 1.0.0...
PT-2024-34761 · Duogeek · Duogeek Custom Admin Menu
Name of the Vulnerable Software and Affected Versions: DuoGeek Custom Admin Menu versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in DuoGeek Custom Admin...
WordPress plugin Custom Admin Menu 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...