760 matches found
PT-2023-1572 · Unknown · Gimmie Plugin
Name of the Vulnerable Software and Affected Versions: Gimmie Plugin version 1.2.2 Description: A critical vulnerability was found in the Gimmie Plugin, affecting an unknown function of the file trigger ratethread.php. The manipulation of the t/postusername argument leads to SQL injection. This...
Gimmie vBulletin SQL注入漏洞
Gimmie vBulletin is a Gimmie open source forum plugin . Gimmie vBulletin version 1.2.2 has a SQL injection vulnerability , the vulnerability stems from a problem with the unknown function in the file triggerratethread.php , the operation of the parameter t/postusername will lead to sql injection...
GHSA-P9W8-2MPQ-49H9 is-url Inefficient Regular Expression Complexity vulnerability
A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is an unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version 1.2....
WordPress plugin WPZOOM Portfolio 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2023-22456
ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...
WordPress plugin JobBoardWP 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
PT-2022-25418 · WordPress · Jobboardwp
Name of the Vulnerable Software and Affected Versions: JobBoardWP WordPress plugin versions prior to 1.2.2 Description: The issue allows unauthenticated users to upload arbitrary files, such as PHP, due to improper validation of file names and types in the file upload functionalities...
CVE-2022-40023 affecting package python-mako for versions less than 1.2.2-1
CVE-2022-40023 affecting package python-mako for versions less than 1.2.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1719
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...
CVE-2022-1718
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
Trudesk 跨站脚本漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A cross-site scripting vulnerability exists in Trudesk versions prior to 1.2.2, which stems from reflected XSS on the ticket filtering functionality, which is capable of executing malicious javascript code in ...
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
...
conf-cfg-ini 安全漏洞
conf-cfg-ini is a package from the individual developer Rolf Loges in Germany. It uses Node.js to encode and decode conf/cfg/ini-Files. A security vulnerability exists in conf-cfg-ini versions prior to 1.2.2, which stems from the fact that this package is susceptible to prototype contamination; i...
GHSA-RHF5-2378-3W3W markdown-it-decorate vulnerable to cross-site scripting (XSS)
markdown-it-decorate adds attributes, IDs and classes to Markdown, and the most recent version 1.2.2 was published in 2017. All versions are currently vulnerable to cross-site scripting XSS and there is no fixed version at this time...
CVE-2022-31290
A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...
CVE-2018-9057 affecting package terraform for versions less than 1.2.2-2
CVE-2018-9057 affecting package terraform for versions less than 1.2.2-2. An upgraded version of the package is available that resolves this issue...
PT-2022-6198 · Dell · Dell Alienware M17 R5 Bios
Name of the Vulnerable Software and Affected Versions: Dell Alienware m17 R5 BIOS versions prior to 1.2.2 Description: The issue is related to a buffer access vulnerability in the BIOS software of Dell Alienware m17 R5 laptops. A malicious user with admin privileges could potentially exploit this...
Server Status 跨站脚本漏洞
Server Status is a collection of server status tools from Confluence. A security vulnerability exists in Server Status version 1.2.2, which can be exploited by an attacker to remotely launch a cross-site scripting attack...