8077 matches found
BIT-PRESTASHOP-2024-41651
An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality. NOTE: this is disputed by multiple parties, who report that exploitation requires that an attacker be able to hijack network requests made by an admin user who, by...
CVE-2024-37869
File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "poster.php" file, and the uploaded file was received using the "$- FILES" variable...
CVE-2024-41512
CADClick v1.11.0 and earlier contains a SQL injection in ccHandler.aspx via the bomid parameter, enabling remote arbitrary SQL execution. Affected component: web API endpoint ccHandler.aspx; root cause: unsafely handling bomid leads to injection. Impact: potential data exposure, modification, or ...
CVE-2024-24117
Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release 9736 allows a remote attacker to gain privileges via the login check state component...
CVE-2024-24117
Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release 9736 allows a remote attacker to gain privileges via the login check state component...
CVE-2024-24117
CVE-2024-24117 affects Ruijie RG-NBS2009G-P RGOS 10.4(1)P2 Release (9736). Affected component: login check state; vulnerability described as insecure permissions allowing a remote attacker to gain privileges. CVSS v3.1 base score 9.8 (CRITICAL) with network attack, no user interaction required, p...
CVE-2024-24116
An issue in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release9736 allows a remote attacker to gain privileges via the system/configmenu.htm...
CVE-2024-24116
An issue in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release9736 allows a remote attacker to gain privileges via the system/configmenu.htm...
CVE-2024-46082
Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting XSS in nmcor.php via the form and field parameters...
CVE-2024-40511
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function...
CVE-2024-40512
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function...
CVE-2024-40512
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function...
CVE-2024-40510
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...
CVE-2024-40509
OpenPetra 2023.02 is affected by a Cross Site Scripting vulnerability in the serverMFinDev.asmx function. The issue enables an unauthenticated or remote attacker to obtain sensitive information (and, per exploit details, potentially steal cookies) via crafted input in serverMFinDev.asmx. Root cau...
CVE-2024-40512
CVE-2024-40512 affects OpenPetra v2023.02 and is caused by a cross‑site scripting (XSS) vulnerability in the serverMReporting.asmx function. The issue can allow a remote attacker to obtain sensitive information from the server. Affected component: the serverMReporting.asmx endpoint within OpenPet...
CVE-2024-40511
CVE-2024-40511 is a Cross Site Scripting vulnerability affecting openPetra v.2023.02. The issue arises in the serverMServerAdmin.asmx function, enabling a remote attacker to obtain sensitive information. Public sources confirm the affected software/version and the vulnerable endpoint, but do not ...
CVE-2024-40510
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...
CVE-2024-40509
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...