CVE-2022-4764 Simple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode

The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attac...

WordPress Plugin Simple File Downloader 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack...

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Simple Customer Relationship Management version 1.0, which stems from a problem in the unknown section of the...

CVE-2023-0902

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2023-0902

CVE-2023-0902 affects SourceCodester Simple Food Ordering System 1.0. The vulnerability is an input handling flaw in process_order.php that allows cross-site scripting (XSS) via manipulation of an argument, enabling injection of script code in the server response. Multiple sources (NVD and securi...

PT-2023-16604 · Sourcecodester · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problem was found in the file process order.php, where the manipulation of the order argument leads to cross-site scripting. This issue can be initiated remotely...

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

Sql injection

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

Regular Expression Denial Of Service (ReDoS)

simple-markdown is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in simple-markdown.js because of insufficient regular expression complexity which allows an attacker to cause long parsing times...

WordPress Simple PDF Viewer Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Software Simple PDF Viewer Type Plugin Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23817 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 65a3708bedaf Credits István Márton Required...

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

CVE-2022-40032

The CVE-2022-40032 entry pertains to Simple Task Managing System v1.0, with a SQL Injection in login.php via the username/login and password fields. The connected documents confirm unauthenticated injection that can lead to arbitrary database queries and sensitive data exposure, including user cr...

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

SUSE CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

SUSE CVE-2007-5846

The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

SUSE CVE-2008-0960

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

SUSE CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...