Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45...

CVE-2023-33924 WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45...

CVE-2023-33924 WordPress SIS Handball plugin <= 1.0.45 - SQL Injection vulnerability

A vulnerability in Felix W. SIS Handball sis-handball.This issue affects SIS Handball: from n/a through = 1.0.45...

CVE-2023-33924

CVE-2023-33924 affects the WordPress SIS Handball plugin (versions

WordPress Plugin sis-handball SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin sis-handba...

PT-2023-32425 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/courses/manage course.php. The manipulation of the id argument leads to...

CVE-2023-41684

Cross-Site Request Forgery CSRF vulnerability in Felix Welberg SIS Handball plugin = 1.0.45 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Felix Welberg SIS Handball plugin = 1.0.45 versions...

CVE-2023-41684 WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Felix Welberg SIS Handball plugin = 1.0.45 versions...

CVE-2023-41684

CVE-2023-41684 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin SIS Handball (versions

CVE-2023-41684 WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Felix Welberg SIS Handball plugin = 1.0.45 versions...

WordPress Plugin sis-handball Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

Path traversal

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)

Software SIS Handball Type Plugin Vulnerable versions = 1.0.45 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41684 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0d7e72427c7d Credits Mika Required privilege...

WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection

Software SIS Handball Type Plugin Vulnerable versions = 1.0.45 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-33924 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 822b04b4b648 Credits Mika Required privilege Administrator Published 23 Ma...

SUSE CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

Softing Secure Integration Server v1.22 Remote Code Execution

This module chains two vulnerabilities CVE-2022-1373 and CVE-2022-2334 to achieve authenticated remote code execution against Softing Secure Integration Server v1.22. In CVE-2022-1373, the restore configuration feature is vulnerable to a directory traversal vulnerablity when processing zip files...

CVE-2022-29957

The Emerson DeltaV Distributed Control System DCS through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade 18508/TCP, 18518/TCP; Plug-and-Play 18510/UDP; Hawk services 18507/UDP; Managemen...