Lucene search
+L

86 matches found

Positive Technologies
Positive Technologies
added 2023/11/07 12:0 a.m.8 views

PT-2023-30220 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the day parameter in the register function of the functions.php resource does not validate the...

9.8CVSS9.8AI score0.00831EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/11/07 12:0 a.m.6 views

PT-2023-30224 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the name parameter in the register function of the functions.php file is vulnerable. Recommendations: For Onli...

7.7AI score
SaveExploits0References4
CVE
CVE
added 2023/10/25 7:36 a.m.58 views

CVE-2023-5311

CVE-2023-5311 concerns the WP EXtra WordPress plugin. A missing capability check in the register() function in versions up to 6.2 allows authenticated users with subscriber-level permissions or higher to modify .htaccess in site root, /wp-content, or /wp-includes and can lead to remote code execu...

8.8CVSS7.4AI score0.01455EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.6 views

WordPress Plugin WP Extra Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.8AI score0.01455EPSS
SaveExploits1References4
OSV
OSV
added 2023/10/04 1:15 p.m.5 views

CVE-2023-5373

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.9AI score0.00805EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.7 views

PT-2023-32074 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability has been found in the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to...

9.8CVSS7.6AI score0.00805EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/09/30 12:0 a.m.8 views

PT-2023-32034 · Wp Extra · Wp Extra

Name of the Vulnerable Software and Affected Versions: WP EXtra versions up to, and including, 6.2 Description: The issue allows unauthorized access to restricted functionality due to a missing capability check on the 'test-email' section of the register function. This enables authenticated...

4.3CVSS5.5AI score0.00395EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.5 views

PT-2022-36332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: The issue concerns a NULL pointer dereference in the can rx register function. This problem was introduced in version v5.10.28 and is fixed in Linux Kernel version v5.10.155. The actual...

7.2AI score
SaveExploits0References1
Code423n4
Code423n4
added 2022/11/28 12:0 a.m.18 views

The _recipient address has no limits to the amount of tokenID (NFTs) it can own

Lines of code Vulnerability details Impact Since the recipient address has no limit to the number of tokenIds it can hold, this makes it possible for an attacker to call the register function many times with different addresses and send many tokenIds to the same recipient, which could cause a...

6.7AI score
SaveExploits0
Code423n4
Code423n4
added 2022/11/28 12:0 a.m.8 views

lack of unregiestered function existen

Lines of code Vulnerability details there is no function to let a smart contract to unregester from a tokenid , since a smart contract can only be regestered once its highly recommended to give it an ability to unregister from a tokenid and register again bob calls register bob has two...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.2 views

PT-2022-34928 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a possible memory leak in the hnae ae register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

7.1AI score
SaveExploits0References1
OSV
OSV
added 2022/02/15 4:15 p.m.7 views

CVE-2022-24226

Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php...

7.5CVSS7.2AI score0.01736EPSS
SaveExploits1References2
NVD
NVD
added 2022/02/15 4:15 p.m.22 views

CVE-2022-24226

Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php...

7.5CVSS0.01736EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/15 4:15 p.m.6 views

CVE-2022-24226

Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php...

7.5CVSS7.2AI score0.01736EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/15 4:15 p.m.22 views

Sql injection

Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php...

5CVSS7.8AI score0.01736EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/15 3:30 p.m.34 views

CVE-2022-24226

Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php...

8AI score0.01736EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/02/15 12:0 a.m.7 views

PT-2022-2744 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue is related to a blind SQL injection vulnerability in the register function of the Hospital Management System, specifically via the func2.php file. This vulnerability can be exploit...

7.8CVSS7.4AI score0.01736EPSS
SaveExploits1References6
Veracode
Veracode
added 2021/11/15 4:27 a.m.25 views

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The vulnerability exists through the register function in UserController.class.php, allowing an attacker to add any member to the team...

5.4CVSS4AI score0.00399EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/10/22 8:15 p.m.20 views

Cross site scripting

Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the Displayname field when using the Add, Edit or Register' functions. This vulnerability allows attackers to execute arbitrary web scripts or HTML...

3.5CVSS5.4AI score0.00576EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
added 2021/08/17 3:37 a.m.17 views

Cross-site Scripting (XSS)

lincmsflask is vulnerable to cross-site scripting xss. The vulnerability exists due to the lack of sanitization of user name in the register function which will execute the script in the logs function...

6.1CVSS2.1AI score0.0127EPSS
SaveExploits1References1Affected Software2
Rows per page
Query Builder