12087 matches found
CVE-2022-46472
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete...
CVE-2022-46472
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete...
Description of the security update for Microsoft Exchange Server 2019: January 10, 2023 (KB5022193)
None None...
PT-2023-7985 · One Identity +3 · Syslog-Ng +5
Name of the Vulnerable Software and Affected Versions: One Identity syslog-ng versions 3.0 through 3.37 syslog-ng Premium Edition version 7.0.30 syslog-ng Store Box version 6.10.0 Description: The issue is related to an integer overflow in the RFC3164 parser, which can be exploited by remote...
CVE-2014-125047
A vulnerability classified as critical has been found in tbezman school-store. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 2957fc97054216d3a393f1775efd01ae2b072001. It is recommended to apply a patch to fix this issue. The identifier...
Sql injection
A vulnerability classified as critical has been found in tbezman school-store. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 2957fc97054216d3a393f1775efd01ae2b072001. It is recommended to apply a patch to fix this issue. The identifier...
CVE-2014-125047
The CVE-2014-125047 entry concerns tbezman school-store with a SQL injection vulnerability in an unknown part, classified as Critical. The patch identifier 2957fc97054216d3a393f1775efd01ae2b072001 is associated with this issue (VDB-217557). No specific affected versions or vulnerable component de...
CVE-2014-125047 tbezman school-store sql injection
A vulnerability classified as critical has been found in tbezman school-store. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 2957fc97054216d3a393f1775efd01ae2b072001. It is recommended to apply a patch to fix this issue. The identifier...
school-store SQL注入漏洞
school-store is a project of Terence Bezman personal developer. It aims to produce an automated system for students working in school-stores. school-store suffers from a SQL injection vulnerability. An attacker exploits this vulnerability to perform a sql injection attack...
PT-2023-10117 · Unknown · Tbezman School-Store
Name of the Vulnerable Software and Affected Versions: tbezman school-store affected versions not specified Description: A critical vulnerability has been found in the tbezman school-store, affecting an unknown part, which leads to sql injection. Recommendations: At the moment, there is no...
sparql-identifiers SQL注入漏洞
sparql-identifiers is a library by the individual developer JervenBolleman. Uses a virtual sparql store to convert URI patterns from one to another for federated queries. A SQL injection vulnerability exists in sparql-identifiers. An attacker could exploit this vulnerability to perform a sql...
canadian-store-24x7.com Cross Site Scripting vulnerability OBB-3126008
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Store Locator WordPress Plugin < 1.4.9 is vulnerable to Cross Site Scripting (XSS)
Software Store Locator WordPress Type Plugin Vulnerable versions 1.4.9 Fixed in 1.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4832 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 643ae0b35cd8 Credits István Márto...
Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode
The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. PoC Exploit...
Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode
The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Exploit...
CVE-2022-44567
A command injection vulnerability exists in Rocket.Chat-Desktop 3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal, which may lead to remote code execution internalVideoChatWindow.tsL17. To exploit the vulnerability, the internal video...
Godfather Android banking malware is on the rise
Researchers at Cyble Research & Intelligence Labs CRIL have found a new version of the Android banking Trojan called Godfather. The new version of Godfather uses an icon and name similar to a legitimate application named MYT Music, which is hosted on the Google Play Store with over 10 million...
Trend Joining App Defense Alliance Announced by Google
Trend Micro’s participation in Google’s App Defense Alliance will ensure the security of customers by preventing malicious apps from being made available on the Google Play Store...