Lucene search
+L

3079 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2024-13266: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4...

5.3CVSS5.8AI score0.00347EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•16 views

WordPress plugin Responsive Flickr Slideshow 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•15 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in the Drupal Responsive and off-canvas menu prior to version 4.4.4, which stems from the inclusion of an authorization error vulnerability...

5.3CVSS6.7AI score0.00347EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•8 views

CVE-2024-11929: Missing Authorization

The Responsive FlipBook Plugin Wordpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the rfbwpsavesettings functionin all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS6AI score0.00268EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2025-22807: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Responsive Flickr Slideshow mobile-friendly-flickr-slideshow allows Stored XSS.This issue affects Responsive Flickr Slideshow: from n/a through = 2.6.0...

6.5CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2024-11382: Improper Neutralization of Input During Web Page Generation

The Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'commonninja' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output...

6.4CVSS6AI score0.00309EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/05 9:15 p.m.•12 views

CVE-2025-0230

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.0068EPSS
SaveExploits1References5
NVD
NVD
•added 2025/01/05 9:15 p.m.•29 views

CVE-2025-0230

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS0.0068EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/05 9:00 p.m.•51 views

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS0.0068EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/05 12:00 a.m.•3 views

CVE-2025-0230: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.0068EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/02 12:15 p.m.•10 views

CVE-2023-45631

Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

5.4CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•33 views

CVE-2023-45631

Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

5.4CVSS0.00318EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•4 views

PT-2025-1491

Name of the Vulnerable Software and Affected Versions wpdevart Responsive Image Gallery, Gallery Album versions n/a through 2.0.3 Description The issue is related to a missing authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album, which allows exploiting incorrectly...

5.4CVSS0.00318EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•1 views

CVE-2023-45631: Missing Authorization

Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

5.4CVSS5.9AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•18 views

WordPress plugin Responsive Image Gallery, Gallery Album 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

5.4CVSS8.8AI score0.00318EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/29 10:15 a.m.•15 views

CVE-2024-13008

A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.8AI score0.0072EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/12/29 9:31 a.m.•15 views

CVE-2024-13008 code-projects Responsive Hotel Site newsletter.php sql injection

A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7.3AI score0.0072EPSS
SaveExploits1References6
CVE
CVE
•added 2024/12/29 9:31 a.m.•71 views

CVE-2024-13008

CVE-2024-13008 affects code-projects’ Responsive Hotel Site version 1.0, specifically the function/file /admin/newsletter.php . The vulnerability arises from improper input validation of the eid parameter, enabling a SQL injection. Attacks can be launched remotely, and the exploit has been disclo...

9.8CVSS6.8AI score0.0072EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/29 12:00 a.m.•4 views

CVE-2024-13008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/newsletter.php. The manipulation of the argument eid leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.5AI score0.0072EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•20 views

PT-2024-17868 · Unknown · Code-Projects Responsive Hotel Site

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Hotel Site version 1.0 Description: A critical issue has been found in the code-projects Responsive Hotel Site, affecting an unknown functionality of the file /admin/newsletter.php. The manipulation of the eid argumen...

9.8CVSS7.2AI score0.0072EPSS
SaveExploits1References11
Rows per page
Query Builder