CVE-2024-8652 Netcat CMS: reflected cross-site scripting in openstat module

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/ . Versions 6.4.0.24248 and o...

WordPress OdiHost Newsletter 1.0 SQL Injection

Exploit Title: WordPress OdiHost Newsletter plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $newsletterid = $GET"id"; ... $wpdb-query"update newsletterstat set newsletterstatopened = CONCATnewsletterstatopened ,'". $subscriberid . ",' wher...