Lucene search
+L

13383 matches found

wpexploit
wpexploit
added 2024/01/03 12:00 a.m.161 views

Site Notes <= 2.0.0 - Admin Note Deletion via CSRF

Description The plugin does not have CSRF checks in some of its functionalities, which could allow attackers to make logged in users perform unwanted actions, such as deleting administration notes, via CSRF attacks Have an administrator open the following HTML file:...

4.3CVSS6.8AI score0.00218EPSS
SaveExploits2
CNNVD
CNNVD
added 2024/01/03 12:00 a.m.10 views

WordPress Plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.8AI score0.00387EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/31 9:15 a.m.28 views

CVE-2023-7130

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

8.8CVSS0.00743EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/31 9:15 a.m.10 views

CVE-2023-7130

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

8.8CVSS5.6AI score0.00743EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/31 9:15 a.m.27 views

Sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

5.8CVSS7.6AI score0.00743EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/31 8:48 a.m.43 views

CVE-2023-7130 code-projects College Notes Gallery login.php sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

6.3CVSS9.2AI score0.00743EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/31 8:48 a.m.53 views

CVE-2023-7130

The CVE-2023-7130 entry concerns code-projects College Notes Gallery 2.0 where an SQL injection affects an unknown functionality in login.php via the manipulated user parameter. Multiple connected sources confirm a SQLi vulnerability with public exploit availability and classify it as critical. T...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/31 12:00 a.m.11 views

PT-2023-32891 · Unknown · Code-Projects College Notes Gallery

Name of the Vulnerable Software and Affected Versions: code-projects College Notes Gallery version 2.0 Description: A critical vulnerability has been found in the code-projects College Notes Gallery, affecting an unknown functionality of the file login.php. The manipulation of the user argument...

8.8CVSS8.1AI score0.00743EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2023/12/31 12:00 a.m.21 views

College Notes Gallery SQL Injection Vulnerability

College Notes Gallery is a personal blog. code-projects College Notes Gallery version 2.0 suffers from a SQL injection vulnerability that stems from the parameter user in the file login.php that causes SQL injection...

8.8CVSS8AI score0.00743EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2023/12/27 12:00 a.m.24 views

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin <= 4.2.1 is vulnerable to Privilege Escalation

Software WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.3.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51546 Patch priority Medium CVSS severity Medium...

7.2CVSS6.5AI score0.00643EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/12/23 2:38 a.m.12 views

SUSE CVE-2023-50569

DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-50250. Reason: This record is a reservation duplicate of CVE-2023-50250. Notes: All CVE users should reference CVE-2023-50250 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

7AI score
SaveExploits0References3
OSV
OSV
added 2023/12/22 3:15 a.m.11 views

CVE-2023-7055

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It i...

5.4CVSS5AI score0.00466EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/22 2:31 a.m.40 views

CVE-2023-7055 PHPGurukul Online Notes Sharing System Contact Information profile.php access control

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It i...

4.3CVSS5.9AI score0.00466EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/22 2:31 a.m.49 views

CVE-2023-7055

The CVE concerns PHPGurukul Online Notes Sharing System v1.0. The vulnerable element is the Contact Information Handler’s file /user/profile.php, where manipulation of the mobilenumber argument enables improper access controls and can be exploited remotely. Public disclosure of the exploit is not...

5.4CVSS5AI score0.00466EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/12/22 2:15 a.m.5 views

CVE-2023-7054

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...

5.4CVSS4.8AI score0.00512EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/22 2:15 a.m.5 views

CVE-2023-7053

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an atta...

8.8CVSS4.4AI score
SaveExploits0References3
NVD
NVD
added 2023/12/22 2:15 a.m.36 views

CVE-2023-7053

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an atta...

8.8CVSS0.00786EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/22 2:15 a.m.26 views

Code injection

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an atta...

2.6CVSS7.4AI score0.00786EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/12/22 2:15 a.m.23 views

Out-of-bounds

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...

6.5CVSS7.2AI score0.00512EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/22 2:00 a.m.47 views

CVE-2023-7054 PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...

6.5CVSS5.9AI score0.00512EPSS
SaveExploits1References3
Rows per page
Query Builder