6001 matches found
WordPress Title Experiments Free plugin <= 9.0.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Title Experiments Free versions = 9.0.4...
WordPress plugin Title Experiments Free 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
UBUNTU-CVE-2024-56803
Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...
CVE-2024-56803
Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...
CVE-2024-56803 Ghostty improperly handles window title sequences which can lead to arbitrary command execution
Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...
CVE-2024-56803 Ghostty improperly handles window title sequences which can lead to arbitrary command execution
Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...
Maid Hiring Management System aboutus.php file cross-site scripting vulnerability
Maid Hiring Management System is a maid hiring management system. The Maid Hiring Management System suffers from a cross-site scripting vulnerability that stems from a lack of adequate validation and escaping of the title parameter input in the file /admin/aboutus.php. An attacker can exploit thi...
Maid Hiring Management System /admin/contactus.php File Cross-Site Scripting Vulnerability
Maid Hiring Management System is a maid hiring management system. The Maid Hiring Management System suffers from a cross-site scripting vulnerability that stems from a lack of sufficient input validation for the page title parameter in the /admin/contactus.php file. An attacker can exploit this...
CVE-2024-13017
A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...
CVE-2024-13013
A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /admin/contactus.php of the component Contact Us Page. The manipulation of the argument page title leads to cross site scripting. It is...
CVE-2024-13007
A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
Codezips Event Management System 注入漏洞
Codezips Event Management System is an open source event management system from Codezips. An injection vulnerability exists in Codezips Event Management System version 1.0, which stems from an incorrect manipulation of the parameter title that can lead to SQL injection...
PHPGurukul Maid Hiring Management System 代码注入漏洞
Maid Hiring Management System is a maid hiring management system. The Maid Hiring Management System suffers from a cross-site scripting vulnerability that stems from a lack of adequate validation and escaping of the title parameter input in the file /admin/aboutus.php. An attacker can exploit thi...
PT-2024-17875 · Unknown · Phpgurukul Maid Hiring Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Maid Hiring Management System. It affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulati...
WordPress Elementor Header & Footer Builder plugin <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Page Title Widget vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.46...
PT-2024-36666 · Pearlbells · Pearlbells Flash News / Post +1
Name of the Vulnerable Software and Affected Versions: Pearlbells Flash News / Post Responsive versions n/a through 4.1 Pearlbells Post Title TypeWriter versions n/a through 4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Privilege Escalation...
UBUNTU-CVE-2024-10043
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to view confidential incident title through the Wiki History Diff feature,...
Test page title
Test page heading...
