3041 matches found
CVE-2023-28838
GLPI (asset/IT management software) is affected by CVE-2023-28838 due to a SQL injection in the statistics/reports area. Affected: GLPI versions prior to 9.5.13 and 10.0.7; patch exists in 9.5.13 and 10.0.7. Remediation: upgrade to 9.5.13 or 10.0.7 or later; as temporary workaround, remove read r...
GLPI SQL注入漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
WordPress WP Statistics Plugin < 14.0 is vulnerable to SQL Injection
Software WP Statistics Type Plugin Vulnerable versions 14.0 Fixed in 14.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0955 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 442f3d5af675 Credits Erwan LR WPScan Required privilege Administrator Publish...
CVE-2023-0955
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manageoptions capability admin+, however the plugin has a settings to allow low...
Sql injection
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manageoptions capability admin+, however the plugin has a settings to allow low...
CVE-2023-0955 WP Statistics < 14.0 - Authenticated SQLi
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manageoptions capability admin+, however the plugin has a settings to allow low...
CVE-2023-0955 WP Statistics < 14.0 - Authenticated SQLi
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manageoptions capability admin+, however the plugin has a settings to allow low...
CVE-2023-0955
CVE-2023-0955 affects the WordPress WP Statistics plugin prior to version 14.0. The vulnerability is an SQL injection caused by a parameter not being escaped, with impact described as potentially affecting confidentiality, integrity, and availability. It is exploitable by authenticated users, wit...
CVE-2023-0955 WP Statistics < 14.0 - Authenticated SQLi
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manageoptions capability admin+, however the plugin has a settings to allow low...
WordPress plugin WP Statistics SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...
Fedora 38 : openbgpd (2023-aa47d33cc8)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-aa47d33cc8 advisory. OpenBGPD 7.8 Improved performance by optimising the output filters Add Autonomous System Provider Authorization ASPA validaton based on...
CVE-2022-38074
SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...
Sql injection
SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...
CVE-2022-38074 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...
CVE-2022-38074
CVE-2022-38074 relates to a SQL Injection vulnerability in VeronaLabs WP Statistics plugin for WordPress (versions
WordPress plugin WP Statistics SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP...
WordPress WP Statistics Plugin < 13.2.11 Multiple SQLi Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...
WordPress WP Statistics Plugin < 13.1.2 CSRF Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...
CVE-2021-4333
The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view function. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins...