3 matches found
Arbitrary File Upload
Overview hipdevteam/bb-plugin is a Fork of BB Plugin Pro for use with composer Affected versions of this package are vulnerable to Arbitrary File Upload via the saveenabledicons function. An attacker can upload arbitrary files to the server by bypassing file type validation, which may allow...
PT-2024-15034 · Unknown +1 · Happy Addons For Elementor Pro +2
Name of the Vulnerable Software and Affected Versions: Happy Addons for Elementor versions up to 3.9.1.1 Happy Addons for Elementor Pro versions up to 2.9.1.1 Description: The issue is related to Reflected Cross-Site Scripting via DOM due to insufficient input sanitization and output escaping. Th...
CVE-2006-6944
phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers...