616 matches found
CVE-2022-40049
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manageuser.php page...
PT-2023-13746 · Sourcecodester · Theme Park Ticketing System
Name of the Vulnerable Software and Affected Versions: sourcecodester Theme Park Ticketing System version 1.0 Description: The issue allows remote attackers to view sensitive information. This is achieved via the id parameter to the "/tpts/manage user.php" API endpoint. Recommendations: For...
CVE-2022-40049
CVE-2022-40049 affects sourcecodester Theme Park Ticketing System v1.0. A SQL injection via the id parameter on /tpts/manage_user.php can lead to unauthorized viewing of sensitive data (confidentiality impact). CVSSv3.1 base score 7.5 (HIGH) with network attack vector, low attack complexity, no u...
Theme Park Ticketing System SQL注入漏洞
Theme Park Ticketing System is a theme park ticketing system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Theme Park Ticketing System version 1.0 that could allow a remote attacker to view sensitive information via the id parameter on the /tpts/manageuser.php...
CVE-2022-3609
The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3609
The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Cross site scripting
The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3609 GetYourGuide Ticketing < 1.0.4 - Admin+ Stored XSS
The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3609 GetYourGuide Ticketing < 1.0.4 - Admin+ Stored XSS
The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3609
The CVE-2022-3609 issue affects the GetYourGuide Ticketing WordPress plugin, version prior to 1.0.4. The plugin does not sanitise/escape certain parameters, enabling Stored XSS by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (such as in multisite setups). The risk ...
PT-2022-23179 · WordPress · Getyourguide Ticketing Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: GetYourGuide Ticketing WordPress plugin versions prior to 1.0.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...
WordPress plugin GetYourGuide Ticketing 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
GetYourGuide Ticketing < 1.0.4 - Admin+ Stored XSS
The plugin does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Navigate toward the GYG Ticketing and GYG...
GetYourGuide Ticketing < 1.0.4 - Admin+ Stored XSS
The plugin does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Navigate toward the GYG Ticketing and GYG Ticketing...
WordPress GetYourGuide Ticketing 1.0.1 Cross Site Scripting
Exploit Title: WordPress Plugin ‘GetYourGuide Ticketing’ - Stored Cross-Site Scripting Date: 18-09-2022 Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/search/GetYourGuide+Ticketing/ Version: 1.0.1 Tested on: Firefox Contact me: [email protected]...
WordPress GetYourGuide Ticketing 1.0.1 Cross Site Scripting Vulnerability
Exploit Title: WordPress Plugin ‘GetYourGuide Ticketing’ - Stored Cross-Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/search/GetYourGuide+Ticketing/ Version: 1.0.1 Tested on: Firefox Contact me: email protected Vulnerable code: " POC: ...
Fedora: Security Advisory for rt (FEDORA-2022-3b84211a66)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: rt-5.0.3-1.fc36
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...
Fedora: Security Advisory for rt (FEDORA-2022-621dca5468)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...