Online Railway Reservation System 访问控制错误漏洞

Online Railway Reservation System is an online railroad reservation system by adminastro individual developers. An access control error vulnerability exists in SourceCodester Online Railway Reservation System version 1.0, which stems from an improper access control issue contained in the id...

Debian dsa-5777 : booth - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5777 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5777-1 [email protected] https://www.debian.org/security/ Moritz...

WordPress WP Ticket Ultra plugin <= 1.0.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin WP Ticket Ultra Help Desk & Support Plugin versions = 1.0.5...

WordPress WP Ticket Ultra Help Desk & Support Plugin Plugin <= 1.0.5 is vulnerable to Local File Inclusion

Software WP Ticket Ultra Help Desk & Support Plugin Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-44011 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 59aeb18e81e7 Credits tahu.datar...

WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jorge Diaz - ddiax Patchstack Alliance in WordPress Plugin Multipurpose Ticket Booking Manager versions = 4.2.2...

WordPress Multipurpose Ticket Booking Manager Plugin <= 4.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Multipurpose Ticket Booking Manager Type Plugin Vulnerable versions = 4.2.2 Fixed in 4.2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44037 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b472848aaab9 Credits Jorge Diaz ddiax...

CVE-2024-7785

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects Electronic Ticket System: before 2024.08...

CVE-2024-7785

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects Electronic Ticket System: before 2024.08...

CVE-2024-7785

CVE-2024-7785 affects Ece Software Electronic Ticket System. The issue is a Reflected XSS caused by improper input neutralization during web page generation, limiting impact to systems before 2024.08. The provided documents do not specify exploitation status, affected versions beyond the stated t...

CVE-2024-7785 Reflected XSS in Ece Software's Electronic Ticket System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects Electronic Ticket System: before 2024.08...

CVE-2024-7785 Reflected XSS in Ece Software's Electronic Ticket System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects Electronic Ticket System: before 2024.08...

Ece Electronic Ticket System 跨站脚本漏洞

Ece Electronic Ticket System is an electronic ticket system from Ece Corporation. A cross-site scripting vulnerability exists in the Ece Electronic Ticket System that stems from improper input neutralization during web page generation...

GHSA-PG4M-3GP6-HW4W org.xwiki.platform:xwiki-platform-notifications-ui leaks data of notification filters of users

Impact It's possible to get access to notification filters of any user by using a URL such as xwiki/bin/get/XWiki/Notifications/Code/NotificationFilterPreferenceLivetableResults?outputSyntax=plain&type=custom&user=. This vulnerability impacts all versions of XWiki since 13.2-rc-1. The filters do...

GHSA-R95W-889Q-X2GX org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions

Impact It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. The impact is that the target user might start loosing notifications on some pages because of this. This vulnerability is present in XWiki since 13.2-rc-1...

CVE-2024-43985

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5...

CVE-2024-43985 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5...

CVE-2024-43985

CVE-2024-43985 is a stored XSS vulnerability in the MagePeople WordPress plugin “Bus Ticket Booking with Seat Reservation” (WPBusTicketly) up to version 5.3.5. The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting via user-supplied inp...

CVE-2024-43985 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5...

WordPress plugin Bus Ticket Booking with Seat Reservation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPre...

PT-2024-30849 · Magepeople · Magepeople Team Bus Ticket Booking With Seat Reservation

Name of the Vulnerable Software and Affected Versions: MagePeople Team Bus Ticket Booking with Seat Reservation versions through 5.3.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored X...