PT-2023-31763 · WordPress · Bsk Pdf Manager

Name of the Vulnerable Software and Affected Versions: BSK PDF Manager plugin for WordPress versions up to, and including, 3.4.1 Description: The issue is related to Stored Cross-Site Scripting via the 'bsk-pdfm-category-dropdown' shortcode due to insufficient input sanitization and output escapi...

CVE-2023-5110: Improper Neutralization of Input During Web Page Generation

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2021-24860

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue...

CVE-2021-24860

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue...

CVE-2021-24860

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue...

Sql injection

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue...

CVE-2021-24860

CVE-2021-24860 affects the BSK PDF Manager WordPress plugin prior to 3.1.2. The issue is a SQL injection in which the plugin fails to validate and escape the orderby and order parameters before using them in a SQL statement. Impact is partial to high due to potential unauthorized data access or m...

CVE-2021-24860 BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue...

WordPress和WordPress 插件 SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plug-ins. WordPress BSK PDF Manager plugin version 3.1.2 before th...

CVE-2021-24860: Improper Neutralization of Special Elements used in an SQL Command

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue...

PT-2021-16341

Name of the Vulnerable Software and Affected Versions: BSK PDF Manager WordPress plugin versions prior to 3.1.2 Description: The issue arises from the lack of validation and escaping of the orderby and order parameters before they are used in a SQL statement, leading to a SQL injection issue...

WordPress BSK PDF Manager plugin <= 3.1.1 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by JrXnm in WordPress BSK PDF Manager plugin versions = 3.1.1. Solution Update the WordPress BSK PDF Manager plugin to the latest available version at least 3.1.2...

BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

The plugin does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue PoC With at least one BSK PDF Category: https://example.com/wp-admin/admin.php?page=bsk-pdf-manager=and+sleep5...

BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

The plugin does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue With at least one BSK PDF Category: https://example.com/wp-admin/admin.php?page=bsk-pdf-manager&order=and+sleep5...

WordPress BSK PDF Manager plugin <= 3.1.1 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by JrXnm in WordPress BSK PDF Manager plugin versions = 3.1.1. Solution Update the WordPress BSK PDF Manager plugin to the latest available version at least 3.1.2...

I, Librarian PDF Manager Command Injection Vulnerability

I, Librarian PDF Manager is an online service that will organize your collection of PDF and office documents. I, Librarian PDF Manager suffers from a command injection vulnerability. An attacker can exploit this vulnerability to inject arbitrary HTML...

I, Librarian PDF Manager Cross-Site Scripting Vulnerability

I, Librarian PDF Manager is an online service that will organize your collection of PDF and office documents. A cross-site scripting vulnerability exists in I, Librarian PDF Manager. An attacker could exploit this vulnerability to cause an information disclosure...

I, Librarian PDF Manager Directory Enumeration Vulnerability

I, Librarian PDF Manager is an online service that will organize your collection of PDF and office documents. A directory enumeration vulnerability exists in I, Librarian PDF Manager, which can be exploited by an attacker to enumerate files in a web server directory...

I, Librarian PDF Manager 4.6 / 4.7 Command Injection / SSRF / Enumeration

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: I, Librarian PDF manager vulnerable version: =4.6 & 4.7 fixed version: 4.8 CVE number: - impact: Critical homepage:...

Librarian PDF Manager 4.6 / 4.7 Command Injection / SSRF / Enumeration

I, Librarian PDF Manager versions 4.6 and below along with version 4.7 suffer from command injection, server-side request forgery, cross site scripting, and directory enumeration vulnerabilities. ======================================================================= title: Multiple vulnerabiliti...