CVE-2024-43018

Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters maxlevel and minregister. These parameters are used in wsusergerList function from file include\wsfunctions\pwg.users.php and this same function is called by ws.php file at some point can be used for searching users in...

PT-2011-2833

Name of the Vulnerable Software and Affected Versions VastHTML Forum Server aka ForumPress plugin versions 1.6.1 through 1.6.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the search max parameter in a "search" action to "index.php", th...