CVE-2024-10426 Codezips Pet Shop Management System animalsadd.php sql injection

A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /animalsadd.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Codezips Pet Shop Management System SQL注入漏洞

Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the id parameter in the /animalsupdate.php file resulting in SQL injectio...

Codezips Pet Shop Management System SQL注入漏洞

Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the t1 parameter in the /deleteanimal.php file resulting in SQL injection...

PT-2024-16277 · Unknown · Codezips Pet Shop Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /deletebird.php. The manipulation of the t1 argument leads to SQL injection. This issue can be...

Codezips Pet Shop Management System SQL注入漏洞

Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the t1 parameter in the /deletebird.php file resulting in SQL injection...

PT-2024-16272 · Unknown · Codezips Pet Shop Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting the /deleteanimal.php file, where the manipulation of the t1 argument leads to SQL injection. The attack can be initiated...

Codezips Pet Shop Management System SQL注入漏洞

Codezips Pet Shop Management System is a Codezips open source pet store management system . Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the id parameter in the /animalsadd.php file, resulting in SQL injection...

pet-insurance.org Cross Site Scripting vulnerability OBB-3946294

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Pet Manager plugin <= 1.4 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Pet Manager versions = 1.4...

CVE-2024-3918

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2024-3918

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2024-3917

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3918

CVE-2024-3918 corresponds to a Stored XSS vulnerability in the WordPress Pet Manager plugin (versions up to 1.4). The issue arises because some Pet settings are not properly sanitised/escaped, enabling high-privilege users (e.g., Contributors) to store scripts that could affect other site users. ...

CVE-2024-3918 Pet Manager <= 1.4 - Contributor+ Stored XSS

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2024-3918 Pet Manager <= 1.4 - Contributor+ Stored XSS

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2024-3917 Pet Manager <= 1.4 - Reflected XSS

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3917 Pet Manager <= 1.4 - Reflected XSS

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2024-28375 · WordPress · The Pet Manager

Name of the Vulnerable Software and Affected Versions: The Pet Manager WordPress plugin versions 1.4 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...

PT-2024-28380 · WordPress · Pet Manager

Name of the Vulnerable Software and Affected Versions: Pet Manager WordPress plugin versions 1.4 and earlier Description: The issue concerns the Pet Manager WordPress plugin, which does not properly sanitise and escape some of its Pet settings. This could allow high-privilege users, such as...

WordPress plugin Pet Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...