12344 matches found
CVE-2023-5260
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...
Sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...
CVE-2023-5260
The CVE-2023-5260 issue affects SourceCodester Simple Membership System 1.0, specifically the group_validator.php file where manipulating the club_id argument causes SQL injection. Documents indicate the attack can be initiated remotely and that exploits have been publicly disclosed. Connected so...
CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...
CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...
WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Shockingly Simple Favicon Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-44246 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cb4ef9c92a27 Credits Nguyen...
PT-2023-31982 · Sourcecodester · Sourcecodester Simple Membership System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue has been found in the processing of the file group validator.php, where the manipulation of the club id argument leads to SQL injection. The attack can be...
Simple Membership System SQL Injection Vulnerability
Simple Membership System is a simple membership system by Razormist Personal Developer. A SQL injection vulnerability exists in Simple Membership System version 1.0, which stems from the parameter clubid in the file groupvalidator.php that can lead to sql injection...
The vulnerability lies in the cropImage function of the software tool for creating and distributing content with LG Simple Editor. This function allows a malicious user to delete any files they desire.
The vulnerability of the cropImage function in the software for creating and distributing content with LG Simple Editor arises due to a typing error during the processing of command-line arguments that handle directory traversal. Exploiting this vulnerability allows an attacker to send specially...
CVE-2023-43872
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS...
CVE-2023-43872
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS...
The vulnerability of the makeDetailContent method in the software tool for creating/distributing content in LG Simple Editor allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the makeDetailContent method in the LG Simple Editor’s content creation/distribution software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary code...
PT-2023-27158 · Unknown · Mitchell Bennis Simple File List
Name of the Vulnerable Software and Affected Versions: Mitchell Bennis Simple File List plugin versions = 6.1.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Mitchell Bennis Simple Fil...
CMS Made Simple Cross-Site Scripting Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS Made Simple...
WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion
Software Simple File List Type Plugin Vulnerable versions = 6.1.9 Fixed in 6.1.10 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-44227 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID a7bcbbd71b3a Credits Rafshanzani Suhada...
PT-2024-13180
Name of the Vulnerable Software and Affected Versions Simple File List versions 6.1.9 and earlier Description The issue is related to a Missing Authorization vulnerability in Mitchell Bennis Simple File List. Recommendations For versions 6.1.9 and earlier, update to a version that includes a fix...
CVE-2023-5135
The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2023-40667
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...