4 matches found
PT-2024-17373 · Unknown · Sourcecodester Testimonial Page Manager
Name of the Vulnerable Software and Affected Versions: SourceCodester Testimonial Page Manager version 1.0 Description: A critical issue has been found in the processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the testimony argument leads ...
CVE-2024-1197: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...
CVE-2024-1196: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...
CVE-2013-5673: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the customquery parameter in a testimonialadd action to wp-admin/admin-ajax.php...