claimPerDraw() can accounts for referrals after the ticket registration deadline

Lines of code Vulnerability details When accounting for referrals, the beforeTicketRegistrationDeadline ensure tickets cannot be purchased after the draw registration deadline. The issue is that the referral registration happens for the current draw regardless of which draw the tickets are...

Several PVS target devices can not be registered

One or several PVS targets can not be registered even after rebooting while other targets are registered with DDC successfully...

CVE-2021-4331

The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 pro and 2.0.6 free. The plugin adds a registration form to the Elementor page builders functionality. As part of the registration form, users can choose which role to se...

Design/Logic Flaw

The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 pro and 2.0.6 free. The plugin adds a registration form to the Elementor page builders functionality. As part of the registration form, users can choose which role to se...

PT-2023-12427 · WordPress · The Plus Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor plugin for WordPress versions up to, and including 4.1.9 pro and 2.0.6 free Description: The plugin is vulnerable to privilege escalation due to a registration form that allows users to choose the default role fo...

CVE-2021-36402

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk...

CVE-2008-10004

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function emailregistrationuser of the file emailregistration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated...

Sql injection

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function emailregistrationuser of the file emailregistration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated...

CVE-2008-10004

CVE-2008-10004 concerns a SQL injection in the Drupal Open Source project’s Email Registration extension. The vulnerability affects the function email_registration_user within the file email_registration.module in the 5.x-2.1 release, where manipulation of the namenew argument enables remote expl...

CVE-2008-10004 Email Registration email_registration.module email_registration_user sql injection

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function emailregistrationuser of the file emailregistration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated...

PT-2023-9865 · Unknown · Email Registration

Name of the Vulnerable Software and Affected Versions: Email Registration versions 5.x-2.1 Description: A critical issue affects the email registration user function of the email registration.module file. The manipulation of the namenew argument leads to SQL injection. The attack can be initiated...

CVE-2021-36402

Technical details (affected Moodle versions, remediation, exploitability) are not provided in the connected documents. Monitor for updates from official advisories; current entries reiterate a sanitization risk in Moodle account confirmation emails without further specifics.

CVE-2021-36402

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk...

CVE-2021-36402

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk...

Multiple e-plugins - Subscriber+ Privilege Escalation

The plugins, sold by the same developer e-plugins, do not implementing any security measures in some AJAX calls. For example in the file plugin.php, the function ivdirectoriesupdateprofilesetting uses updateusermeta with any data provided by the ajax call, which can be used to give the logged in...

The vulnerability of the management interface for Fortinet FortiPortal analytics and security management tools allows a attacker to gain access to information about user account passwords.

The vulnerability of the management interface for Fortinet’s FortiPortal security analysis and management tool is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to account password information...

The vulnerability of the event log journal of the CELOG cluster operating system PowerScale OneFS, which allows a intruder to disclose protected information

The vulnerability of the CELOG event log journal of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update

The plugin has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, the most serious one being reading and updating the WordPress options which could be used to enable registration with a default administrator user...

The vulnerability of the PowerScale OneFS operating system, related to the disclosure of information through registration files, allows a perpetrator to disclose protected information.

The vulnerability of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the IPMI interface of the PowerScale OneFS operating system, which allows a hacker to disclose protected information

The vulnerability of the IPMI interface of the PowerScale OneFS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...