CVE-2024-11971

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971

CVE-2024-11971 affects Guizhou Xiaoma Technology jpress 5.1.2. The vulnerability resides in the Avatar Handler’s file upload endpoint at /commons/attachment/upload, where manipulating the files argument leads to cross-site scripting. The issue can be triggered remotely and exploits have been disc...

CVE-2024-11961

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This issue affects the function preHandle of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The manipulation of the argument request leads to information...

CVE-2024-11961 Guangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosure

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This issue affects the function preHandle of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The manipulation of the argument request leads to information...

CVE-2024-11961 Guangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosure

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This issue affects the function preHandle of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The manipulation of the argument request leads to information...

CVE-2024-52495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

CVE-2024-52495 WordPress Distance Based Shipping Calculator plugin <= 2.0.21 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eniture Technology Distance Based Shipping Calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through 2.0.21...

CVE-2024-52495 WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

CVE-2024-52495

CVE-2024-52495 is an SQL Injection vulnerability in WordPress Distance Based Shipping Calculator (Eniture Technology). The Initial Description notes SQL Injection affecting Distance Based Shipping Calculator: from n/a through 2.0.21. Connected sources (Patchstack) indicate WordPress Distance Base...

Arbitrary File Read Vulnerability in YonBIP of UFIDA Network Technology Co.

YonBIP is a new generation of UFIDA's world-leading enterprise digital intelligence platform and application software, which UFIDA began to strategically invest in and develop at scale in 2017. An arbitrary file read vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which ca...

Command Execution Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.

Founded in December 2010, Shanghai SinoCom-ArtM Information Technology Co., Ltd. is one of the leading domestic suppliers in the fields of data, intelligent security operation and maintenance, mobile security and security services. A command execution vulnerability exists in the Operations and...

PT-2024-35336 · Enituretechnology · Enituretechnology Distance Based Shipping Calculator

Name of the Vulnerable Software and Affected Versions: Eniture Technology Distance Based Shipping Calculator versions n/a through 2.0.21 Description: The issue involves an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL...

CVE-2024-52475: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

Oqiwei Information Technology (Beijing) Co., Ltd. bakuro nebula - digital food service system has SQL injection vulnerability

Oqiwei Information Technology Beijing Co., Ltd. is committed to be a continuous leader of digital solutions in the cloud era. Aoqiwei Information Technology Beijing Co., Ltd. BAKU Nebula - Digital Food Service System has a SQL injection vulnerability, which can be exploited by attackers to obtain...

Valor Apps Easy Folder Listing Pro Joomla! extension deserialization vulnerability

RISK EVALUATION Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows any external user can gain console access to vulnerable web servers that could potentially lead to total compromise of the web server, potential privilege escalation, and initial access into...

Arbitrary File Read Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

HkCms File Upload Vulnerability in Guangzhou Hengqi Education Technology Co.

HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...

XML Entity Injection Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a comprehensive business management software for large enterprises. An XML entity injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive information...