255 matches found
CVE-2024-50801
A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update function in publichtml/admin/controller/responses/listinggrid/collections.php. The vulnerability is exploitable via the id parameter...
PT-2024-34412 · Unknown · Abantecart
Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.0 Description: A SQL Injection issue was discovered in the update function within the public html/admin/controller/responses/listing grid/collections.php file. The issue is exploitable via the id parameter...
CVE-2024-50801
A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update function in publichtml/admin/controller/responses/listinggrid/collections.php. The vulnerability is exploitable via the id parameter...
CVE-2024-50802
A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update function in publichtml/admin/controller/responses/listinggrid/emailtemplates.php. The vulnerability is exploitable via the id parameter...
CVE-2024-46376
The SourceCodester Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability within the update_account() function of the rental/admin_class.php file. This flaw allows for unauthorized file uploads, potentially leading to full system compromise. No specific remediatio...
GHSA-XXQW-83C7-R24R FeehiCMS file upload vulnerability
A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...
PT-2024-38921 · Feehicms · Feehicms
Name of the Vulnerable Software and Affected Versions: FeehiCMS versions up to 2.1.1 Description: A critical vulnerability was found in FeehiCMS, affecting the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to...
CVE-2024-6754
The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the ‘wpwautoposterupdatetweettemplate’ function in all versions up to, and including, 5.3.14. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2023-52680
In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error checks to ctlget The ctlget functions which call scarlett2update were not checking the return value. Fix to check the return value and pass to the caller...
CVE-2024-32236
An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...
PT-2024-24468 · Cmseasy · Cmseasy
Name of the Vulnerable Software and Affected Versions: CmsEasy versions 7.7 and earlier Description: The issue allows a remote attacker to obtain sensitive information via the update function in the "index.php" component. Recommendations: For CmsEasy versions 7.7 and earlier, update to a version...
CVE-2024-32236
An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...
CVE-2024-32236
The CmsEasy content management system (CMS), developed by Jiuzhou ET Technology, is vulnerable in versions v.7.7 and before . A remote attacker can obtain sensitive information by exploiting a flaw in the update function located within the index.php component. To remediate this issue, users are r...
CVE-2024-32236
An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...
CmsEasy 安全漏洞
CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy v.7.7 and prior versions, which originated from allowing remote attackers to obtain sensitive information via the update function in t...
CVE-2024-0447
The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the artibotupdate function in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers, with...
WordPress Plugin ArtiBot Free Chat Bot for WordPress WebSites Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-18201 · WordPress · Categorify
Name of the Vulnerable Software and Affected Versions: Categorify plugin for WordPress versions up to, and including, 1.0.7.4 Description: The issue is related to a missing capability check on the categorifyAjaxUpdateFolderPosition function, allowing authenticated attackers with subscriber-level...
PT-2024-17676 · Juanpao · Jpshop
Name of the Vulnerable Software and Affected Versions: Juanpao JPShop versions up to 1.5.02 Description: A critical issue has been found in the API component, specifically affecting the actionUpdate function of the /api/controllers/merchant/design/MaterialController.php file. The manipulation of...