CVE-2022-36681

Summary: CVE-2022-36681 affects Simple Task Scheduling System v1.0, with a SQL injection vulnerability in the id parameter of the endpoint /classes/Master.php?f=delete_account. The root cause is an unsafely handled id value leading to SQL injection. The vulnerability is considered high severity (...

CVE-2022-36683

CVE-2022-36683 affects Simple Task Scheduling System v1.0 . It describes a SQL injection vulnerability in the parameter id of /classes/Master.php?f=delete_payment. Root cause: unsanitized input fed into SQL, enabling arbitrary queries. Impact is described as C on confidentiality, integrity, and a...

CVE-2022-36680

CVE-2022-36680 affects Simple Task Scheduling System v1.0. The vulnerability is a SQL injection in the id parameter of the endpoint /classes/Master.php?f=delete_schedule, enabling potentially unauthorized data access or manipulation. The CVSS v3.1 score is 9.8 (CRITICAL) with network attack vecto...

CVE-2022-36678

CVE-2022-36678 affects Simple Task Scheduling System v1.0. A SQL injection vulnerability exists in the id parameter to /classes/Master.php?f=delete_category, allowing potentially arbitrary SQL execution. The NVD entry rates it as CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected...

PT-2022-23546 · Unknown · Simple Task Scheduling System

Name of the Vulnerable Software and Affected Versions: Simple Task Scheduling System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete category" API endpoint. Recommendation...

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in classes/Master.php?f=deletepayment...

CVE-2022-2957

A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation of the argument memid leads to sql injection. The attack can be launched...

Sql injection

A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation of the argument memid leads to sql injection. The attack can be launched...

CVE-2022-2957

CVE-2022-2957 affects SourceCodester Simple and Nice Shopping Cart Script. The vulnerability is an SQL injection in an unknown functionality of the file /mkshop/Men/profile.php triggered by manipulating the mem_id parameter. Documents indicate the attack could be launched remotely and that an exp...

CVE-2021-4142

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...

CVE-2022-2558

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations...

CVE-2022-2558

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations...

CVE-2022-2558

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations...

CVE-2022-0446

The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0446

The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0446

The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Code injection

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations...

CVE-2022-2558 Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations...

CVE-2022-2558

The CVE-2022-2558 issue affects the WordPress plugin Simple Job Board prior to version 2.10.0 . The vulnerability is a directory listing disclosure that allows public access to uploaded resumes in certain configurations. Affected component is the plugin’s file handling in those configurations, en...

CVE-2022-0446 Simple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting

The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...