10 matches found
CVE-2024-11728
CVE-2024-11728 KiviCare – Sistema de Gestión de Clínicas y Pacientes EHR Plugin de WordPress - PoC de Inyección SQL No Autenticada Este repositorio contiene un script de Prueba de Concepto PoC para explotar una vulnerabilidad de Inyección SQL en el plugin KiviCare – Sistema de Gestión de Clínicas...
CVE-2026-12657: Authorization Bypass Through User-Controlled Key
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.2 via the 'serviceid' parameter due to missing validation on a user controlled key. This makes it possible for...
EUVD-2019-15860
Malware in sbrugna...
CVE-2024-11729: Improper Neutralization of Special Elements used in an SQL Command
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'servicelist0serviceid' parameter of the getwidgetpaymentoptions AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter an...
CVE-2024-11728: Improper Neutralization of Special Elements used in an SQL Command
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'visittypeserviceid' parameter of the taxcalculateddata AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2019-6295
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...
Sql injection
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...
CVE-2019-6295
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...
CVE-2019-6295: Improper Neutralization of Special Elements used in an SQL Command
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...
