12329 matches found
CVE-2023-4297 Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories...
PT-2023-29434 · WordPress · Mmm Simple File List
Name of the Vulnerable Software and Affected Versions: Mmm Simple File List WordPress plugin versions prior to 2.3 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and escape some of its...
The vulnerability of Siemens SINEMA Server’s network management and configuration software allows a perpetrator to execute arbitrary code with privileges of SYSTEM.
The vulnerability of Siemens SINEMA Server network management and configuration software is related to the possibility of implementing SNMP configurations. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of SYSTEM remotely...
WordPress plugin Mmm Simple File List Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress plugin Mmm Simple File List Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Simple Long Form Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Simple Long Form Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41136 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f92f4ede21be Credits DoYeon Park p6rkdoye0n Required privile...
PT-2023-28660 · WordPress · Mmm Simple File List
Name of the Vulnerable Software and Affected Versions: Mmm Simple File List WordPress plugin versions prior to 2.3 Description: The issue allows any authenticated users, such as subscribers, to list the content of arbitrary directories due to a lack of validation in the generated path...
Simple 301 Redirects by BetterLinks < 2.0.8 - Missing Authorization via clicked
Description The Simple 301 Redirects by BetterLinks plugin for WordPress is vulnerable to unauthorized enabling of plugin usage tracking due to a missing capability check on the clicked function in all versions up to, and including, 2.0.7. This makes it possible for subscribers to enable plugin...
WordPress Simple Testimonials Showcase Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Simple Testimonials Showcase Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48283 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 964d38648042 Credits Nguyen...
CVE-2023-48078
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
CVE-2023-48078
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
CVE-2023-48078
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
Sql injection
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
CVE-2023-48078
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
CVE-2023-48078
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
CVE-2023-48078
CVE-2023-48078 affects Simple CRUD Functionality v1.0. The vulnerability is an SQL injection in the add.php handler, exploitable via the title parameter, allowing arbitrary SQL execution. The reported CVSSv3.1 score is 9.8 (CRITICAL) with network attack vector, no authentication, and all CIA impa...
CVE-2023-46023
SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...
Sql injection
SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...
Code-Projects Simple Task List Security Vulnerability
Code-Projects Simple Task List is Code-Projects open source a simple task list system . Code-Projects Simple Task List version 1.0 has a security vulnerability , the vulnerability stems from allowing an attacker to obtain sensitive information through the status parameter in addTask.php...
The vulnerability of the `simple_object_elf_match` function in the `libiberty/simple-object-elf.c` development toolset of the GNU Binutils allows a attacker to trigger a service failure.
The vulnerability of the simpleobjectelfmatch function in the libiberty/simple-object-elf.c development tool of the GNU Binutils library is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause service failures remotely...