330 matches found
CVE-2022-47171 WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin = 1.1 versions...
CVE-2022-47171
CVE-2022-47171 affects the Paul C. Schroeder IP Vault – WP Firewall plugin for WordPress, specifically versions <= 1.1. The issue is a Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Impact is described as low severity with Privilege...
CVE-2023-26604
creationtimestamp| type| source ---|---|--- 2023-02-28 17:45:34+00:00| seen| https://t.me/lamerZen/34 2023-03-03 18:34:29+00:00| seen| https://t.me/cibsecurity/59378 2023-03-03 20:37:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3867 2023-03-08 16:18:04+00:00| seen|...
HIMA Paul Hildebrandt X-OPC 、X-OTS 代码问题漏洞
HIMA Paul Hildebrandt X-OPC and HIMA Paul Hildebrandt X-OTS are both products of HIMA Paul Hildebrandt, Inc.HIMA Paul Hildebrandt X-OPC is an intelligent security platform.HIMA Paul Hildebrandt X-OTS is a security simulator. -OTS is a safety simulator. A code issue vulnerability exists in HIMA Pa...
maps-js-icoads 路径遍历漏洞
maps-js-icoads is a spatio-temporal data visualization of ships and buoys by the individual developer Paul R. Saxman. A path traversal vulnerability exists in maps-js-icoads. An attacker exploiting this vulnerability could access files and directories stored outside of the web root folder...
paulbenjamin.com.au Cross Site Scripting vulnerability OBB-3077212
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
auto-bilan-paul-montel.fr Cross Site Scripting vulnerability OBB-2870357
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-33191
Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Chinmoy Paul's Testimonials plugin = 3.0.1 at WordPress...
Cross site scripting
Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Chinmoy Paul's Testimonials plugin = 3.0.1 at WordPress...
CVE-2022-33191
CVE-2022-33191 affects the WordPress Testimonials plugin
paul-award.de Cross Site Scripting vulnerability OBB-2692505
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-5953 Malicious code in sc-paul (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad54f4ed59a7b7c15aa41bdea193e0d193255c3effdbde8b9877bb5fde32d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sc-paul (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad54f4ed59a7b7c15aa41bdea193e0d193255c3effdbde8b9877bb5fde32d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Wedding Management System Arbitrary File Upload Vulnerability (CNVD-2022-54294)
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to arbitrary file uploads, which can be exploited by attackers to upload malicious files and remotely execute arbitrary code...
Wedding Management System SQL Injection Vulnerability (CNVD-2022-54282)
Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer. clientassign.php?booking=31&userid=The page lacks validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensiti...
Wedding Management System SQL Injection Vulnerability (CNVD-2022-54283)
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the lack of validation of external The vulnerability is caused by a lack of validation of extern...
Wedding Management System SQL Injection Vulnerability (CNVD-2022-54279)
Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from /Wedding-Management/admin/ blogeventsedit.php?id=31 page lacks validation of external input SQL statements, which can ...
Wedding Management System SQL Injection Vulnerability (CNVD-2022-54286)
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/featureedit.php page that lacks An attacker can use this vulnerability to execute...
Wedding Management System Arbitrary File Upload Vulnerability (CNVD-2022-54291)
Wedding Management System v1.0 is a wedding planning management system by John Paul Lim Gabule, a personal developer. The vulnerability is caused by a lack of validation of the uploaded files in the photosedit.php page, which could be exploited to upload malicious files and remotely execute...
Wedding Management System SQL Injection Vulnerability (CNVD-2022-54290)
Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/photosedit.php page's lack of validation of external An attacker can use this...