DEBIAN-CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501 WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501

CVE-2024-23501 is a Stored XSS vulnerability in the Ebook Store WordPress plugin by Shopfiles Ltd. Public details indicate improper neutralization of input during web page generation, allowing stored script execution. Affected range is Ebook Store versions up to 5.788. The issue is listed as Patc...

CVE-2024-23501 WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

WordPress Plugin Ebook Store Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.788 Fixed in 5.8002 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23501 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1c136e2d77a0 Credits Dragonim Required privilege Administrator...

PT-2024-19903 · Unknown · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store versions n/a through 5.788 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

CVE-2021-46919

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled. Current code allows change when device is enabled but wq is disabled. Change the check to detect device state...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24100

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

CVE-2024-24100

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

Sql injection

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is affected by an SQL Injection vulnerability exposed through BookSBIN. The CVE entry notes a Local attacker with Low privileges can exploit this, with no user interaction required, and impacts confidentiality, integrity, and availability (base score 7.8, HIG...

CVE-2024-24100

CVE-2024-24100 affects Code-projects Computer Book Store 1.0. The issue is a SQL Injection via the PublisherID parameter in the application, constituting an input handling flaw that can lead to unauthorized data exposure or modification. The CVSS 3.1 metrics given indicate a high-severity, networ...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24100

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

SuperStoreFinder - Multiple Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title SuperStoreFinder - Multiple Vulnerabilities .:. Google Dorks .:. "designed and built by Joe Iz." "Super Store Finder is designed and built by Joe Iz from Highwarden Huntsman." inurl:/superstorefinder/index.php ....