Lucene search
K

10 matches found

CNVD
CNVD
added 2025/09/02 12:0 a.m.2 views

Apartment Management System month_setup.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter txtMonthName in the file /setting/monthsetup.php. An attacker c...

9.8CVSS8.3AI score0.00387EPSS
Exploits1References1
NVD
NVD
added 2025/08/29 1:15 a.m.3 views

CVE-2025-9599

A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...

9.8CVSS0.00387EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/08/29 12:32 a.m.8 views

CVE-2025-9599 itsourcecode Apartment Management System month_setup.php sql injection

A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...

7.5CVSS0.00387EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/29 12:32 a.m.2 views

CVE-2025-9599 itsourcecode Apartment Management System month_setup.php sql injection

A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...

7.5CVSS7.1AI score0.00387EPSS
Exploits1References5
Patchstack
Patchstack
added 2024/05/15 6:57 a.m.2 views

WordPress month name translation benaceur plugin < 2.3.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin month name translation benaceur versions 2.3.8...

4.8CVSS6.1AI score0.00352EPSS
Exploits2References1Affected Software1
OSV
OSV
added 2024/05/15 6:15 a.m.1 views

CVE-2024-3634

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.8CVSS5.8AI score0.00352EPSS
Exploits2References1
NVD
NVD
added 2024/05/15 6:15 a.m.16 views

CVE-2024-3634

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.8CVSS5.4AI score0.00352EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/05/15 6:0 a.m.15 views

CVE-2024-3634 month name translation benaceur < 2.3.8 - Admin+ Stored XSS

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

5.5AI score0.00352EPSS
Exploits2References1
CNNVD
CNNVD
added 2024/05/15 12:0 a.m.3 views

WordPress plugin month name translation benaceur 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.8CVSS6.3AI score0.00352EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/03/05 12:0 a.m.115 views

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

5.3CVSS6.5AI score0.03063EPSS
Exploits0References2
Rows per page
Query Builder