PT-2024-32086 · Helpdesk · Helpdesk

Name of the Vulnerable Software and Affected Versions: HelpDeskZ version 2.0.2 Description: A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box. This issue potential...

WordPress plugin ForumWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Kliqqi CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-37619)

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/adminlog.php?clear=1 does not adequately verify that the request is from a trusted user , an attacker can use this...

Kliqqi CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-37626)

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . A cross-site request forgery vulnerability exists in Kliqqi CMS version v2.0.2, which originates from /module.php?module=karma does not adequately verify that the request comes from a trusted user, and can be exploited by an...

Kliqqi CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-37615)

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/adminbackup.php?dobackup=files does not adequately verify that the request is from a trusted user , an attacker ca...

Kliqqi CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-37621)

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of the cross-site request forgery vulnerability , the vulnerability stems from /admin/adminwidgets.php?action=remove&widget=Statistics does not adequately verify whether the request is from a truste...

Kliqqi CMS Cross-Site Request Forgery Vulnerability (CNVD-2024-37613)

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/adminbackup.php?dobackup=clearall does not adequately verify that the request is from a trusted user , an attacker...

PT-2024-30056 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability can be exploited via the "/admin/admin group.php?mode=delete&group id=3" endpoint. This allows for unauthorized action...

PT-2024-30063 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin backup.php endpoint with the dobackup parameter set to files. This allows an attacker...

PT-2024-30057 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/edit page.php endpoint, specifically when the link id parameter is set to 1. This allows an...

PT-2024-30070 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the /admin/domain management.php endpoint with specific parameters, including id, list, and remove...

PT-2024-30066 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin widgets.php endpoint with specific parameters: action=install and widget=akismet. Thi...

PT-2024-30061 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability is exploited via the "/admin/admin backup.php?dobackup=avatars" API endpoint. Recommendations: For Pligg CMS version 2.0.2,...

PT-2024-30069 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered, affecting the software through the "module.php?module=karma" endpoint. This allows for malicious requests to be made on behalf of the user...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of the cross-site request forgery vulnerability , the vulnerability stems from /admin/adminwidgets.php?action=remove&widget=Statistics does not adequately verify whether the request is from a truste...

PT-2024-30065 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the "/admin/domain management.php?whitelist add" API endpoint. Recommendations: For Pligg CMS version...

Pear Admin Boot Security Vulnerability

Pear Admin Boot is an out-of-the-box Spring rapid development platform for the Pear Admin community in China. A security vulnerability exists in Pear Admin Boot version 2.0.2 and prior versions. An attacker exploited the vulnerability to perform a SQL injection attack...

Pear Admin Boot SQL Injection Vulnerability

Pear Admin Boot is an out-of-the-box Spring rapid development platform for the Pear Admin community in China. A SQL injection vulnerability exists in Pear Admin Boot version 2.0.2 and earlier versions. An attacker exploits this vulnerability to perform SQL injection attacks...

CVE-2024-31098

Missing Authorization vulnerability in Mr.Ebabi New Order Notification for Woocommerce.This issue affects New Order Notification for Woocommerce: from n/a through 2.0.2...

WordPress plugin New Order Notification for Woocommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...