906 matches found
WordPress plugin AnyWhere Elementor 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. The WordPress plugin AnyWhere Elementor...
AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
The plugin discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked. PoC See the disclosed secret key in includes/pro.php...
CVE-2023-2293
A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=saveitem. The manipulation of the argument description with the input alertdocument.cookie leads to cross site...
CVE-2023-2293
A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=saveitem. The manipulation of the argument description with the input alertdocument.cookie leads to cross site...
Cross site scripting
A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=saveitem. The manipulation of the argument description with the input alertdocument.cookie leads to cross site...
CVE-2023-2293
CVE-2023-2293 affects SourceCodester Purchase Order Management System 1.0, with the vulnerability located in the file path likely involved in the save_item operation (classes/Master.php?f=save_item). The root cause is cross-site scripting via the description parameter, where input such as can be...
CVE-2023-2293 SourceCodester Purchase Order Management System cross site scripting
A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=saveitem. The manipulation of the argument description with the input alertdocument.cookie leads to cross site...
PT-2023-18773 · Sourcecodester · Sourcecodester Purchase Order Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Purchase Order Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown part of the file classes/Master.php?f=save item. The manipulation of the description argument with...
Purchase Order Management System 跨站脚本漏洞
Purchase Order Management System is a Purchase Order Management System by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Purchase Order Management System version 1.0, which results from cross-site scripting due to misuse of the parameter description...
Used Routers Often Come Loaded With Corporate Secrets
More than half of the enterprise routers researchers bought secondhand hadn’t been wiped, exposing sensitive info like login credentials and customer data...
CVE-2023-2130
A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
CVE-2023-2130
A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
CVE-2023-2130 SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection
A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
CVE-2023-2130
SourceCodester Purchase Order Management System 1.0 contains a SQL injection in the /admin/suppliers/view_details.php endpoint (GET parameter id). The root cause is unsafely handling the id parameter, enabling an attacker to inject arbitrary SQL and potentially access or manipulate data. Exploita...
Purchase Order Management System SQL注入漏洞
Purchase Order Management System is a Purchase Order Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Purchase Order Management System version 1.0, which is caused by incorrect manipulation of the parameter id resulting in sql injection...
CVE-2023-29623
Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...
CVE-2023-29623
Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...
CVE-2023-29622
Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchaseorder/admin/login.php...