Lucene search
+L

138 matches found

Cvelist
Cvelist
added 2024/03/19 3:42 p.m.38 views

CVE-2024-29104 WordPress Ticket Tailor plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zimma Ltd. Ticket Tailor allows Stored XSS.This issue affects Ticket Tailor: from n/a through 1.10...

6.5CVSS6.6AI score0.00312EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/19 3:42 p.m.13 views

CVE-2024-29104 WordPress Ticket Tailor plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zimma Ltd. Ticket Tailor allows Stored XSS.This issue affects Ticket Tailor: from n/a through 1.10...

6.5CVSS6.7AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/19 3:42 p.m.63 views

CVE-2024-29104

CVE-2024-29104 is a Stored XSS in the Ticket Tailor WordPress plugin (Ticket Tailor, by Zimma Ltd.), affecting versions up to 1.10. The issue arises from improper neutralization of input during web page generation. Severity is MEDIUM (CVSS v3.1 base score 6.5). Remediation exists: the vulnerabili...

6.5CVSS8.6AI score0.00312EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.6 views

PT-2024-22724 · Unknown · Ticket Tailor

Name of the Vulnerable Software and Affected Versions: Ticket Tailor versions 1.10 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means an attacker can inject malicious scripts into the website,...

6.5CVSS8.8AI score0.00312EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.8 views

WordPress Plugin Ticket Tailor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/15 12:0 a.m.13 views

WordPress Ticket Tailor Plugin <= 1.10 is vulnerable to Cross Site Scripting (XSS)

Software Ticket Tailor Type Plugin Vulnerable versions = 1.10 Fixed in 1.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29104 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bf9f96915120 Credits Ray Wilson Required privilege Contributor...

6.5CVSS6.6AI score0.00312EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2023/04/25 12:0 a.m.10 views

Tailor Mangement System SQL Injection Vulnerability

Tailor Management System is a tailor store management system. Tailor Mangement System is vulnerable to an SQL injection vulnerability that stems from the presence of an SQL injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the customer parameter of...

8.8CVSS8.4AI score0.00997EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/18 12:0 a.m.20 views

Tailor Management System SQL Injection Vulnerability (CNVD-2023-29361)

Tailor Management System is a tailor store management system. A SQL injection vulnerability exists in the Tailor Management System version, which stems from the existence of a SQL injection vulnerability that can be exploited by a remote, authenticated attacker to execute arbitrary code...

9.3AI score0.01378EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2023/04/18 12:0 a.m.37 views

Tailor Management System SQL Injection Vulnerability (CNVD-2023-29360)

Tailor Management System is a tailor store management system. Tailor Management System version 1.0 is vulnerable to SQL injection, which can be exploited by remote authenticated attackers to execute arbitrary code...

9AI score0.01378EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2023/04/10 1:15 p.m.7 views

CVE-2020-36077

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file...

8.8CVSS6.1AI score0.00997EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/10 1:15 p.m.23 views

CVE-2020-36077

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file...

8.8CVSS9AI score0.00997EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/10 1:15 p.m.16 views

Sql injection

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file...

6.5CVSS9AI score0.00997EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/10 12:0 a.m.10 views

CVE-2020-36077

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file...

9AI score0.00997EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.9 views

Tailor Mangement System SQL注入漏洞

Tailor Management System is a tailor store management system. Tailor Mangement System is vulnerable to an SQL injection vulnerability that stems from the presence of an SQL injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the customer parameter of...

8.8CVSS8.7AI score0.00997EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/04/10 12:0 a.m.32 views

CVE-2020-36077

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file...

9AI score0.00997EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/10 12:0 a.m.59 views

CVE-2020-36077

CVE-2020-36077 describes an SQL injection in Tailor Mangement System v1, exploitable via the customer parameter of orderadd.php, potentially leading to arbitrary code execution. Public details consistently identify the vulnerable component as the Tailor Mangement System and the trigger is a query...

8.8CVSS8.9AI score0.00997EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/10 12:0 a.m.9 views

PT-2023-11805

Name of the Vulnerable Software and Affected Versions Tailor Mangement System version 1 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the customer parameter of the "orderadd.php" file. This enables the attacker to potentially access and manipulate...

8.8CVSS8.4AI score0.00997EPSS
SaveExploits0References6
OSV
OSV
added 2023/04/06 3:15 p.m.8 views

CVE-2020-36073

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

8.8CVSS6.1AI score0.01349EPSS
SaveExploits1References1
NVD
NVD
added 2023/04/06 3:15 p.m.24 views

CVE-2020-36073

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

8.8CVSS9AI score0.01349EPSS
SaveExploits1References1
NVD
NVD
added 2023/04/06 3:15 p.m.27 views

CVE-2020-36071

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page...

8.8CVSS8.8AI score0.01405EPSS
SaveExploits1References1
Rows per page
Query Builder