28 matches found
WordPress Plugin OMGF Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
CVE-2023-30247: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the updatesettings parameter...
CVE-2021-24779: Missing Authorization
The WP Debugging WordPress plugin before 2.11.0 has its updatesettings function hooked to admininit and is missing any authorisation and CSRF checks, as a result, the settings can be updated by unauthenticated users...
CVE-2021-38841
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...
Remote code execution
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...
CVE-2021-38841
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...
CVE-2021-38841
CVE-2021-38841 affects Simple Water Refilling Station Management System 1.0. The vulnerability arises in the SystemLogo option on the system_info page, within classes/SystemSettings.php (update_settings action), enabling Remote Code Execution. Connected documents confirm the affected component an...
CVE-2021-38841: Unrestricted Upload of File with Dangerous Type
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...