12046 matches found
Cross site request forgery (csrf)
Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, suc...
Sql injection
Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php...
Yoga Class Registration System SQL注入漏洞
Yoga Class Registration System is a yoga class registration system. A SQL injection vulnerability exists in Yoga Class Registration System v1.0, which originates from the lack of validation of the cid parameter in /admin/login.php against external SQL input. An attacker can exploit this...
CVE-2023-29626
Yoga Class Registration System 1.0 has a SQL injection vulnerability in /admin/login.php via the cid parameter. Root cause is lack of validation/external SQL input, leading to potential unauthorized access to sensitive data. The CVSSv3.1 scores indicate high impact on confidentiality with no easy...
CVE-2023-29626
Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php...
WordPress WP Roles at Registration Plugin <= 0.23 is vulnerable to Cross Site Scripting (XSS)
Software WP Roles at Registration Type Plugin Vulnerable versions = 0.23 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27609 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8c0ad520c36f Credits Pavak Tiwari...
CVE-2022-33294
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in the incorrect restriction on the path to the restricted-access catalog, which allows attackers to gain unauthorized access to protected information.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Fortinet FortiNAC network access control mechanism lies in the insufficient protection of registration data, allowing attackers to retrieve user password information.
The vulnerability of the Fortinet FortiNAC network access control device is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to retrieve user password information by unauthorized access to the database...
The vulnerability of the VMware HPE OneView for VMware vCenter management tool, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the VMware HPE OneView for VMware vCenter management tool is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform, related to insufficient protection of registration data, allows a perpetrator to gain access to secret keys.
The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to secret keys...
The vulnerability of the IBM DB2 database management system for Windows operating systems lies in the ability to disclose information through registration files, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the IBM DB2 database management system for Windows operating systems is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
[NetScaler] Error "KB Questions and Asnwers not registered" with LDAP KBAttribute
In a SSPR nFactor configuration. You may observe error "KB Questions and Asnwers not registered" when login with LDAP password and can't move to the next AAA factor. Triggers are: The LDAP factor has noschema boundInherits username & password from a previous factor. LDAP action has KBAttribute...
CVE-2023-1955
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attac...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attac...
CVE-2023-1955 SourceCodester Online Computer and Laptop Store User Registration login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attac...
CVE-2023-1955 SourceCodester Online Computer and Laptop Store User Registration login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attac...
PT-2023-17368 · Unknown · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability has been found in the User Registration component of the affected software. The issue is related to the manipulation of the email argument in an...
