Saibamen HotelManager 跨站脚本漏洞

Saibamen HotelManager is a web application for managing hotels written in Laravel by the individual developer Saibamen. A security vulnerability exists in Saibamen HotelManager v1.2, which stems from improper sanitization of its comment and contact fields, allowing an attacker to implement...

CVE-2022-3401

The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website content in versions 1.2 to 1.5.3. This, combined with the missing authorization vulnerability CVE-2022-3400, makes it possible for authenticate...

CVE-2021-37782

Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...

CVE-2021-37782

Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...

CVE-2021-37781

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

Cross site scripting

Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...

WordPress theme Bricks 代码注入漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress theme is a theme for WordPress. A remote code execution vulnerability exists in WordPress theme Bricks plugin 1.2 and later,...

Employee Record Management System 跨站脚本漏洞

PHPGurukul Phpgurukul Employee Record Management System is an Employee Record Management System from PHPGurukul, Inc. A cross-site scripting vulnerability exists in Employee Record Management System version 1.2, which stems from a cross-site scripting issue in editempprofile.php...

PT-2022-10699 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.2 Description: The issue is related to SQL Injection via the SEMCMS User.php file. Recommendations: For SEMCMS version 1.2, update to a version that fixes the SQL Injection issue in SEMCMS User.php...

PT-2022-10669 · Unknown · Employee Record Management System

Name of the Vulnerable Software and Affected Versions: Employee Record Management System version 1.2 Description: The issue is related to SQL Injection via the editempprofile.php file. Recommendations: For Employee Record Management System version 1.2, consider restricting access to the...

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.2, which stems from a SQL injection issue in SEMCMSUser.php...

Security Bulletin: Potential security exposure when using InfoSphere BigInsights due to vulnerability in Java JDK Version 6

Abstract IBM InfoSphere BigInsights makes use of Java Development Kit JDK Version 6. An unspecified vulnerability affecting availability has been identified in IBM Java 6 that may affect InfoSphere BigInsights. Content VULNERABILITY DETAILS: CVE-2012-0501 DESCRIPTION: An unspecified vulnerability...

Dell Container Storage Modules Path Traversal Vulnerability

Dell Container Storage Modules is a set of modules from Dell, Inc. Dell Container Storage Modules version 1.2 contains a path traversal vulnerability that could be exploited by a remote authenticated attacker with low privileges to cause unintentional access to paths outside of restricted...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.2 due to a SQL injection in the bookId parameter of its...

CVE-2022-2443

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.2. This is due to missing nonce protection on the FreemindOptions function found in the /freemind-wp-browser.php file. This makes it possible for unauthenticated attackers t...

CVE-2022-2443 FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.2. This is due to missing nonce protection on the FreemindOptions function found in the /freemind-wp-browser.php file. This makes it possible for unauthenticated attackers t...

Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin

Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file org.jenkinsci.plugins.elasticsearchquery.ElasticsearchQueryBuilder.xml on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

PT-2022-22344 · Jenkins · Jenkins Recipe Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Recipe Plugin version 1.2 and earlier Description: A cross-site request forgery issue allows attackers to send an HTTP request to a specified URL and parse the response as XML. Recommendations: For Jenkins Recipe Plugin version 1.2 an...

Jenkins Plugin Recipe 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application software. jenkins Recipe Plugin version 1...

WordPress plugin Sticky Popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Sticky Popup plugin 1.2 and earlier versions have a cross-site scripting vulnerability, whi...