CVE-2024-11963 code-projects Responsive Hotel Site room.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launched remotely. The...

CVE-2024-11963

CVE-2024-11963 affects code-projects Responsive Hotel Site 1.0. The vulnerability is a SQL injection in the /admin/room.php file caused by improper handling of the troom parameter, which can be exploited remotely. Multiple sources describe an attacker manipulating troom to execute SQL commands an...

CVE-2024-11961

CVE-2024-11961 affects Guangzhou Huayi Intelligent Technology Jeewms 3.7, specifically the preHandle function in src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The issue is argument manipulation leading to information disclosure, with remote exploit potential and public disclos...

CVE-2024-11963: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launched remotely. The...

CVE-2024-11659 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diagiperf. The manipulation of the argument iperf leads to command injection. The attack may be...

CVE-2024-11658

A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajaxgetChannelList. The manipulation of the argument countryCode leads to command...

CVE-2024-11658

CVE-2024-11658 affects EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT (up to 20241118). The vulnerability stems from an injection in the file /admin/network/ajax_getChannelList where manipulating the countryCode parameter leads to command injection, exploitable remotely. Public exploit appears to ...

CVE-2024-11656

CVE-2024-11656 affects EnGenius ENH1350EXT, ENS500-AC and ENS620EXT (up to 20241118). The issue is a command-injection in the /admin/network/diag_ping6 handling, triggered by manipulation of the diag_ping6 argument, potentially exploitable remotely. Public exploit appears to have been disclosed. ...

CVE-2024-11619

The CVE-2024-11619 issue affects macrozheng mall up to version 1.0.3, specifically the JWT Token Handler component. Root cause: use of a default cryptographic key, which can compromise confidentiality/integrity if exploited. Exploitation complexity is described as high and exploitation is difficu...

CVE-2024-11488

CVE-2024-11488 affects 115cms up to version 20240807. The issue is a cross-site scripting vulnerability in the processing of /app/admin/view/web_user.html, triggered by manipulating the ks parameter. Exploitation may be remotely initiated and public disclosures exist. Multiple sources (NVD, Red H...

CVE-2024-11487

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

CVE-2024-51940

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sohelwpexpert WP Responsive Video my-wp-responsive-video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through = 1.0...

CVE-2024-51940 WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sohelwpexpert WP Responsive Video my-wp-responsive-video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through = 1.0...

CVE-2024-51940 WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in sohelwpexpert WP Responsive Video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through 1.0...

CVE-2024-51940

CVE-2024-51940 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin WP Responsive Video . The issue is due to improper neutralization of input during Web Page Generation, affecting plugin versions from n/a through 1.0. The connected documents confirm the plugin is vuln...

WordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin AI Responsive Gallery Album versions = 1.4...

CVE-2024-11305 Altenergy Power Control Software status_zigbee get_status_zigbee sql injection

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function getstatuszigbee of the file /index.php/display/statuszigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated...

WordPress plugin WP Responsive Video 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-35074 · WordPress · Wp Responsive Video

Name of the Vulnerable Software and Affected Versions: WP Responsive Video versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This means that an attacker cou...

CVE-2024-51940: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sohelwpexpert WP Responsive Video my-wp-responsive-video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through = 1.0...