Lucene search
+L

15935 matches found

osv_cve
osv_cve
•added 2023/12/21 3:15 p.m.•16 views

CVE-2023-47527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

5.4CVSS7.3AI score0.00291EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/21 3:15 p.m.•36 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

4.9CVSS6.9AI score0.00291EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/21 2:27 p.m.•85 views

CVE-2023-47527

CVE-2023-47527 involves the WP Edit Username WordPress plugin and is a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Affected versions are listed as from n/a through 1.0.5. The connected Red Hat CVE record (RH:CVE-2023-47527) c...

5.9CVSS6.7AI score0.00291EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•19 views

WordPress plugin WP Edit Username Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.2AI score0.00291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•8 views

CVE-2023-47527: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

5.9CVSS6AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•20 views

PT-2023-30486 · WordPress · Wp Edit Username

Name of the Vulnerable Software and Affected Versions: WP Edit Username versions 1.0.0 through 1.0.5 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

5.9CVSS6AI score0.00291EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/12/20 9:15 p.m.•20 views

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/12/20 9:15 p.m.•15 views

CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/12/20 2:15 a.m.•13 views

CVE-2023-47705

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228...

4.3CVSS5.8AI score0.00519EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•9 views

CVE-2023-48433: Improper Neutralization of Special Elements used in an SQL Command

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00666EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/20 12:00 a.m.•20 views

PT-2023-30851 · Unknown · Projectworld Online Voting System

Name of the Vulnerable Software and Affected Versions: Online Voting System Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the "login action.php" resource does not validate the characters received and they are...

9.8CVSS9.9AI score0.00666EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•9 views

CVE-2023-48434: Improper Neutralization of Special Elements used in an SQL Command

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00666EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/20 12:00 a.m.•2 views

PT-2023-31256

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/customer support/ajax.php?action=login" API endpoint. Recommendations...

9.8CVSS5.8AI score0.0114EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•7 views

CVE-2023-47705: Improper Input Validation

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228...

4.3CVSS5.5AI score0.00519EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/20 12:00 a.m.•17 views

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Voting System Project v1.0, which stems from the username parameter in regaction.php that does not validate received characters and is sent to the database...

9.8CVSS8AI score0.00666EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/12/20 12:00 a.m.•18 views

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Voting System Project v1.0, which stems from the username parameter in loginaction.php that does not validate received characters and is sent to the database...

9.8CVSS8AI score0.00666EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/12/20 12:00 a.m.•192 views

CVE-2023-51385

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or...

6.5CVSS6.7AI score0.19753EPSS
SaveExploits8References6
Positive Technologies
Positive Technologies
•added 2023/12/19 12:00 a.m.•3 views

PT-2023-30578

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Key Lifecycle Manager version 4.3 Description The issue allows an authenticated user to manipulate username data due to improper input validation. Recommendations For IBM Security Guardium Key Lifecycle Manager version 4....

4.3CVSS5.6AI score0.00519EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/19 12:00 a.m.•22 views

IBM Security Guardium 输入验证错误漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An input validation error vulnerability exists in IBM...

4.3CVSS6.5AI score0.00519EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/12/19 12:00 a.m.•20 views

WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Edit Username Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47527 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3874545cb784 Credits Jeongwoo-LeeRoronoa Required privileg...

5.9CVSS6.6AI score0.00291EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder