CVE-2022-40132

The CVE-2022-40132 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Seriously Simple Podcasting plugin prior to version 2.16.0, where an attacker could change plugin settings due to missing CSRF protection. Affected software is the Seriously Simple Podcasting plu...

PT-2022-25234 · WordPress · Seriously Simple Podcasting

Name of the Vulnerable Software and Affected Versions: Seriously Simple Podcasting plugin versions prior to 2.16.0 Description: A Cross-Site Request Forgery CSRF issue allows for changes to plugin settings. Recommendations: For versions prior to 2.16.0, update to version 2.16.0 or later to resolv...

The vulnerability of the Simple DirectMediaLayer library, related to integer overflow, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Simple DirectMediaLayer library is related to a potential overflow when creating a new RGB surface. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a special...

WordPress plugin Seriously Simple Podcasting 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2022-40087

Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function fileputcontents. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-40089

A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...

CVE-2022-40089

A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...

CVE-2022-40089

The CVE-2022-40089 entry concerns Simple College Website v1.0 vulnerable to Remote File Inclusion (RFI) via a crafted PHP file when allow_url_include is On. Affected component: the Simple College Website application; root cause: RFI enabling arbitrary code execution. Impact stated in sources: rem...

CVE-2022-40088

Simple College Website v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /collegewebsite/index.php?page=. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

CVE-2022-40088

The CVE-2022-40088 entry affects Simple College Website v1.0, with a reflected XSS vulnerability in the page parameter of /college_website/index.php?page=. The root cause is input reflected back into the page, enabling arbitrary web-script/HTML execution when a crafted payload is submitted. The N...

CVE-2022-40087

Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function fileputcontents. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-25194 · Unknown · Simple College Website

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the...

Simple College Website 安全漏洞

Sourcecodester Simple College Website is Sourcecodester an open source application . A content management system. A security vulnerability exists in Simple College Website v1.0 that originates from a vulnerability that allows an attacker to execute arbitrary code via a crafted PHP file...

PT-2022-25193 · Unknown · Simple College Website

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, leveraging an arbitrary file write vulnerability. This is achieved through the file put contents function...

Simple College Website 跨站脚本漏洞

Sourcecodester Simple College Website is Sourcecodester an open source application . A content management system. A security vulnerability exists in Simple College Website v1.0 that could allow an attacker to execute arbitrary web script or HTML via a specially crafted payload that injects page...

Simple College Website 代码问题漏洞

Sourcecodester Simple College Website is Sourcecodester an open source application . A content management system. A security vulnerability exists in Simple College Website v1.0, which stems from an arbitrary file write vulnerability via the fileputcontents function. The vulnerability allows an...

CVE-2022-40029

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

CVE-2022-40030

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php...

CVE-2022-40029

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

CVE-2022-40027

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...