PT-2024-23421 · Falang · Falang

Name of the Vulnerable Software and Affected Versions: Falang multilanguage versions 1.3.47 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injectin...

WordPress Plugin Falang multilanguage for WordPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Falang multilanguage for...

WordPress Falang multilanguage Plugin <= 1.3.47 is vulnerable to SQL Injection

Software Falang multilanguage Type Plugin Vulnerable versions = 1.3.47 Fixed in 1.3.48 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30495 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 420627fa8863 Credits Jean Tirstan T Required privilege...

CVE-2023-37968

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

CVE-2023-37968

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

CVE-2023-37968

CVE-2023-37968 : Falang multilanguage for WordPress plugin (

CVE-2023-37968 WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

WordPress plugin Falang multilanguage 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Falang multilanguage < 1.3.40 - Cross-Site Request Forgery

Description Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

Software Falang multilanguage Type Plugin Vulnerable versions = 1.3.39 Fixed in 1.3.40 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37968 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1920d648ac5e Credits Skalucy...

WordPress Falang multilanguage plugin <= 1.3.17 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Falang multilanguage plugin versions = 1.3.17. Solution Update the WordPress Falang multilanguage plugin to the latest available version at least 1.3.18...

Arbitrary File Deletion Vulnerability in songcms 3.16

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . songcms 3.16 arbitrary file deletion vulnerability , an attacker can use the...

Description of Update Rollup 9 for Microsoft System Center 2012 Operations Manager SP1

Description of Update Rollup 9 for Microsoft System Center 2012 Operations Manager SP1 Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2012 Operations Manager Service Pack 1 SP1. Additionally, this article contains the installation...

CVE-2020-10408

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

Cross site scripting

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

CVE-2018-6796

CVE-2018-6796 affects the PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0. The connected CNVD/CNVD entries describe a Stored XSS vulnerability that can be triggered via arbitrary input fields on user profiles. The root cause is input fields not properly sanitizing or encoding data, allo...

Multilanguage Real Estate MLM Script 3.0 Cross Site Scripting

Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...