CVE-2023-4847

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4847 SourceCodester Simple Book Catalog App Update Book Form cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...

CVE-2023-4847

CVE-2023-4847 affects SourceCodester Simple Book Catalog App v1.0, specifically the Update Book Form. An unknown function within this form lets an attacker manipulate the book_title or book_author parameters, causing cross-site scripting. The vulnerability is remote-exploitable and has public exp...

CVE-2023-4846 SourceCodester Simple Membership System delete_member.php sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4846

CVE-2023-4846 affects SourceCodester Simple Membership System 1.0. The vulnerability is a SQL injection in the file delete_member.php, caused by manipulating the mem_id argument. It can be exploited remotely and has been publicly disclosed. Multiple sources describe this as a critical issue with ...

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2023-4845

SourceCodester Simple Membership System 1.0 contains a SQL injection in account_edit_query.php via the admin_id parameter. Exploitation can be remote and public disclosures exist (CVE-2023-4845, VDB-239254). Root cause is unsafe handling of input in account_edit_query.php; impact details are prov...

CVE-2023-4838

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'before' and 'after'. This makes it possible...

Simple Membership System SQL Injection Vulnerability

Simple Membership System is a simple membership system for Razormist individual developers. A SQL injection vulnerability exists in SourceCodester Simple Membership System version 1.0, which stems from an unknown section of the file accounteditquery.php, which leads to sql injection via the...

PT-2023-30854 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple Membership System. The issue affects the file account edit query.php, where the manipulation of the admin id...

SourceCodester Simple Book Catalog App Cross-Site Scripting Vulnerability

Simple Book Catalog App is a simple book catalog application by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in SourceCodester Simple Book Catalog App version 1.0, which stems from the presence of an unknown function in the component Update Book Form, leading...

WordPress Plugin Simple Download Counter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-4844

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file clubeditquery.php. The manipulation of the argument clubid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file clubeditquery.php. The manipulation of the argument clubid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2023-4844

CVE-2023-4844 affects SourceCodester Simple Membership System 1.0 via an SQL injection in the file club_edit_query.php caused by unsanitized club_id input. The issue can be exploited remotely and exploits have been publicly disclosed. Root cause: inadequate input validation for club_id. Impact: d...

CVE-2023-4844 SourceCodester Simple Membership System club_edit_query.php sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file clubeditquery.php. The manipulation of the argument clubid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

PT-2023-30806 · WordPress · Simple Download Counter

Name of the Vulnerable Software and Affected Versions: The Simple Download Counter plugin for WordPress versions up to, and including, 1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's shortcodes due to insufficient input sanitization and output escaping on...

PT-2023-30853 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue was found in the file club edit query.php, where the manipulation of the club id argument leads to SQL injection. This can be initiated remotely. The issue has...

Cross site scripting

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the listtype parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web...