WordPress WP Photo Album Plus Plugin <= 8.8.05.003 is vulnerable to Cross Site Scripting (XSS)

Software WP Photo Album Plus Type Plugin Vulnerable versions = 8.8.05.003 Fixed in 8.8.07.004 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9951 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 361cb23fe9c7 Credits Noah...

WordPress plugin WP Lead Plus X 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2020-36839: Cross-Site Request Forgery (CSRF)

The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.99. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform administrative actions, such as...

CVE-2024-21257

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...

CVE-2024-9971

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents...

CVE-2024-9971

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents...

CVE-2024-9970

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie...

CVE-2024-9970

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie...

CVE-2024-9971 NewType FlowMaster BPM Plus - SQL Injection

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents...

CVE-2024-9971

The CVE-2024-9971 issue affects NewType’s FlowMaster BPM Plus. A flaw in the product’s specific query function fails to properly restrict user input, allowing SQL injection. This enables remote attackers with regular privileges to read, modify, or delete database contents. Documents cite a high-s...

CVE-2024-9971 NewType FlowMaster BPM Plus - SQL Injection

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents...

CVE-2024-9970 NewType FlowMaster BPM Plus - Privilege Escalation

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie...

CVE-2024-9970

CVE-2024-9970 concerns NewType’s FlowMaster BPM Plus, where a privilege-escalation flaw allows an attacker with regular privileges to tamper with a specific cookie to gain administrator rights. The CVSS-3.1 metrics indicate Network access, Low attack complexity, Privileges Required: Low, with Hig...

NewType FlowMaster BPM Plus SQL注入漏洞

NewType FlowMaster BPM Plus is a business process management system from NewType, a Chinese company. A SQL injection vulnerability exists in NewType FlowMaster BPM Plus, which arises from a specific query function that does not properly restrict user input, allowing a remote attacker with regular...

PT-2024-10849 · WordPress · Wp Lead Plus X

Name of the Vulnerable Software and Affected Versions: WP Lead Plus X plugin for WordPress versions up to, and including, 0.99 Description: The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on several functions. This...

PT-2024-7154 · Oracle · Oracle Hyperion

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion BI+ version 11.2.18.0.000 Description: The issue is related to insufficient input validation in the UI and Visualization component of Oracle Hyperion BI+. It allows a low-privileged attacker to compromise Oracle Hyperion BI+ a...

CVE-2024-9970: Reliance on Cookies without Validation and Integrity Checking

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie...

CVE-2024-9971: Improper Neutralization of Special Elements used in an SQL Command

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents...

PT-2024-39968 · Newtype · Flowmaster Bpm Plus

Name of the Vulnerable Software and Affected Versions: FlowMaster BPM Plus affected versions not specified Description: The FlowMaster BPM Plus system from NewType has a privilege escalation issue. Remote attackers with regular privileges can elevate their privileges to administrator by tampering...

PT-2024-39969

Name of the Vulnerable Software and Affected Versions FlowMaster BPM Plus from NewType affected versions not specified Description The specific query functionality in the FlowMaster BPM Plus does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL...