53 matches found
EUVD-2018-19482
Malware in sbrugna...
EUVD-2024-51105
Malicious code in bioql PyPI...
EUVD-2023-57397
Malicious code in bioql PyPI...
CVE-2023-5054
The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for unauthenticated attacker...
CVE-2024-12785
A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
CVE-2024-12785 itsourcecode Vehicle Management System sendmail.php sql injection
A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
CVE-2024-12785 itsourcecode Vehicle Management System sendmail.php sql injection
A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
CVE-2024-12785
The CVE-2024-12785 vulnerability affects itsourcecode Vehicle Management System 1.0, specifically the sendmail.php file. The issue arises from unsafely handling the id (or idcabs) parameter, enabling SQL injection. Exploitation appears to be remote and has been publicly disclosed. Multiple connec...
CVE-2024-12785: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
Parameter Injection
zend-mail is vulnerable to Parameter Injection. The vulnerability is due to unsanitized additional quote characters within an address in the file Sendmail.php, which allows an attacker to inject arbitrary parameters to the system sendmail program...
CVE-2023-5054
The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for unauthenticated attacker...
CVE-2023-5054 Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for unauthenticated attacker...
CVE-2023-5054: Missing Authorization
The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for unauthenticated attacker...
PT-2023-31583 · WordPress · Super Store Finder
Name of the Vulnerable Software and Affected Versions: Super Store Finder plugin for WordPress versions up to, and including, 6.9.3 Description: The issue is related to insufficient restrictions on the sendMail.php file, allowing direct access and enabling unauthenticated attackers to send emails...
PT-2022-8085
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in the software, which allows for SQL injection via the id parameter in the "/admin/dl sendmail.php" API endpoint when an attacker has admin authority. Recommendations For zzcms version...
PT-2022-8084
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the /dl/dl sendmail.php endpoint when the attacker has dls print authority. This vulnerability can be exploited via the dlid cooki...
PT-2022-8091
Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue was discovered in zzcms, where there is a SQL injection vulnerability in the "/admin/ztliuyan sendmail.php" endpoint when the attacker has admin authority, via the id parameter. Recommendations For zzcms...
PT-2021-22851
Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description The issue is related to an SQL Injection problem. It occurs via the id parameter in the "admin/dl sendmail.php" endpoint. Recommendations For versions 8.2, 8.3, 2020, and 2021, consider...
PT-2021-10425
Name of the Vulnerable Software and Affected Versions: zz cms version 2019 Description: A SQL injection issue allows attackers to retrieve sensitive data via the dlid parameter in the "/dl/dl sendmail.php" page cookie. Recommendations: For zz cms version 2019, consider restricting access to the...