CVE-2021-24626: Improper Neutralization of Special Elements used in an SQL Command

The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, removecss, also does not sanitise or escape the cssid POST...

Flying Dog Software Powerslave 4.3 Portalmanager - sql_id Information Disclosure

Flying Dog Software Powerslave 4.3 Portalmanager - sqlid Information Disclosure source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive informatio...

Flying Dog Software Powerslave 4.3 Portalmanager - 'sql_id' Information Disclosure

source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive information about the underlying database structure. The problem is reported to exist in t...