32083 matches found
CVE-2024-8619 Ajax Search Lite <= 4.12.2 - Admin+ Stored XSS
The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-8619 Ajax Search Lite <= 4.12.2 - Admin+ Stored XSS
The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-8619
The CVE-2024-8619 entry concerns the WordPress plugin Ajax Search Lite, affected version(s) prior to 4.12.3. The root cause is inadequate sanitisation/escaping of certain settings, which could enable a stored cross-site scripting (Stored XSS) attack by high-privilege users (e.g., admins) even whe...
CVE-2024-36321
Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2025-4696
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched...
PHPGurukul Cyber Cafe Management System SQL注入漏洞
Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /search.php. An attacker can exploit this...
PT-2025-21526 · WordPress · Ajax Search Lite
Name of the Vulnerable Software and Affected Versions: Ajax Search Lite versions prior to 4.12.3 Description: The issue concerns the Ajax Search Lite WordPress plugin, which does not properly sanitize and escape some of its settings. This could allow high-privilege users, such as administrators, ...
WordPress plugin Ajax Search Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
The vulnerability of Adobe Substance 3D Modeler software lies in its uncontrolled search mechanism, which allows attackers to execute arbitrary code.
The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
CVE-2025-31225
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...
The vulnerability of the Power Automate for Desktop automation platform on Windows operating systems stems from an uncontrolled search path element, which allows a malicious individual to disclose protected information.
The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
Online Birth Certificate System /search.php File SQL Injection Vulnerability
Online Birth Certificate System is an online birth certificate system. The Online Birth Certificate System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /admin/search.php. An...
CVE-2025-4540
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...
CVE-2025-43553
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-43553
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-21099
Uncontrolled search path for some IntelR Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20079
Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20079
Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...