WordPress plugin WP Mobile Menu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-7275

A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/categorysave.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-7276

A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/membersave.php. The manipulation of the argument last/first leads to sql injection. The attack can be launched...

CVE-2024-7218

A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=savestudent. Executing manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

itsourcecode Alton Management System SQL注入漏洞

Alton Management System is an open source content management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Alton Management System, which is caused by a SQL injection vulnerability in the last/first function of the /admin/membersave.php page...

PT-2024-38178

Name of the Vulnerable Software and Affected Versions SourceCodester School Log Management System version 1.0 Description A problem was found in the processing of the file "/admin/ajax.php?action=save student". The manipulation of the name argument leads to cross-site scripting. The attack can be...

SourceCodester School Log Management System 安全漏洞

SourceCodester School Log Management System is an open source school log management system from SourceCodester. A security vulnerability exists in SourceCodester School Log Management System version 1.0, which originates from a cross-site scripting vulnerability in the name function of the...

PT-2024-38225 · Unknown · Alton Management System

Name of the Vulnerable Software and Affected Versions: Alton Management System version 1.0 Description: A critical issue has been found in the Alton Management System, affecting an unknown functionality of the file /admin/member save.php. The manipulation of the last and first arguments leads to...

itsourcecode Alton Management System SQL注入漏洞

itsourcecode Alton Management System is an online restaurant management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Alton Management System, which is caused by an SQL injection vulnerability in the category function of the /admin/categorysave.php...

CVE-2024-7200

A vulnerability, which was classified as problematic, has been found in SourceCodester Complaints Report Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savesettings. The manipulation of the argument name leads to cross site scripting. The atta...

PT-2024-38162 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file "/admin/ajax.php?action=save settings". The manipulation of the name argument...

Complaints Report Management System 跨站脚本漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in version 1.0 of the Complaints Report Management System, which stems from a cross-site scripting vulnerability in the name parameter of t...

CVE-2024-7172

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this vulnerability is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument httphost leads to buffer overflow. The attack can be...

CVE-2024-7157

A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050B20200504. It has been classified as critical. This affects the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument httphost leads to buffer overflow. It is possible to initiate the...

TOTOLINK A3100R 安全漏洞

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R version 4.1.2cu.5050B20200504 suffers from a buffer overflow vulnerability that originates in the getSaveConfig function of /cgi-bin/cstecgi.cgi?action=save&setting where the httphost fails...

PT-2024-38134 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical vulnerability was found in the getSaveConfig function of the /cgi-bin/cstecgi.cgi?action=save&setting file. The manipulation of the http host argument leads to a buffer...

The vulnerability of the automation_tree_rules_form_save() function in the Cacti network monitoring software allows a attacker to perform XSS attacks.

The vulnerability of the automationtreerulesformsave function in the Cacti network monitoring software automationtreerules.php is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2024-37533)

Summary An information disclosure vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-37533 DESCRIPTION: IBM InfoSphere Information Server could disclose sensitive user information to another user with physical access to the machine. CVSS Base score:...

CVE-2024-37549

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 4.0.0...

CVE-2024-37549 WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 4.0.0...