444 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-9998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a...
PT-2025-34245 · Unknown · Phpgurukul Online Course Registration System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: A flaw exists in PHPGurukul Online Course Registration 3.1 related to SQL injection. The issue is located in the /admin/session.php file, specifically through manipulation of the...
CVE-2025-48156 WordPress Image Wall plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall allows Stored XSS. This issue affects Image Wall: from n/a through 3.1...
WordPress plugin Pre-Publish Post Checklist 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2024-41797
A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions V3.1, SCALANCE XC316-8 6GK5324-8TS00-2AC2 All versions V3.1, SCALANCE XC324-4 6GK5328-4TS00-2AC2 All versions V3.1, SCALANCE XC324-4 EEC 6GK5328-4TS00-2EC2 All versions V3.1, SCALANCE XC332 6GK5332-0GA00-2AC2 All...
CVE-2025-30627 WordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in regolithsjk Elegant Visitor Counter elegant-visitor-counter allows Stored XSS.This issue affects Elegant Visitor Counter: from n/a through = 3.1...
Ruby RACK 3.1.x < 3.1.16 DoS
The version of the RACK Ruby library installed on the remote host is 3.1.x prior to 3.1.16 . It is, therefore, affected by a DoS vulnerability where an attacker can create a crafted input can cause Content-Disposition header parsing in Rack to take an unexpected amount of time, possibly resulting...
CVE-2024-42012
GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate...
CVE-2021-39412
Multiple Cross Site Scripting XSS vulnerabilities exists in PHPGurukul Shopping v3.1 via the 1 callback parameter in a serverside/scripts/idjsonp.php, b serverside/scripts/jsonp.php, and c scripts/objectsjsonp.php, the 2 value parameter in examplessupport/editableajax.php, and the 3 PHPSELF...
CVE-2014-7981
SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2018-25017
RawSpeed aka librawspeed 3.1 has a heap-based buffer overflow in TableLookUp::setTable...
CVE-2025-4771
A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possible to launch the attack remotely. The exploit h...
PT-2025-21647 · Unknown · Phpgurukul Online Course Registration System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: A critical issue was found in the software, affecting some unknown functionality of the file /admin/level.php. The manipulation of the level argument leads to SQL injection. This...
CVE-2025-39528
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes rescue-shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through = 3.1...
CVE-2025-39528
CVE-2025-39528 — WordPress Rescue Shortcodes stored XSS . The Rescue Shortcodes plugin (vulnerable component: input handling during web page generation) permits a stored Cross‑Site Scripting vulnerability affecting Rescue Shortcodes versions n/a through 3.1. Public details confirm the issue type ...
WordPress plugin Rescue Shortcodes 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2025-14842 · Code Projects · Patient Record Management System
Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 code-projects Patient Record Management System version 3.1 Description: A critical issue was found in the Patient Record Management System. The problem is related to an unknown...
WordPress plugin Advanced WooCommerce Product Sales Reporting SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
CVE-2025-30597 WordPress IG Shortcodes plugin <= 3.1 Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iografica IG Shortcodes ig-shortcodes allows DOM-Based XSS.This issue affects IG Shortcodes: from n/a through = 3.1...
WordPress IG Shortcodes plugin <= 3.1 Cross Site Scripting (XSS) Vulnerability
WordPress IG Shortcodes plugin = 3.1 Cross Site Scripting XSS Vulnerability discovered by timomangcut in WordPress Plugin IG Shortcodes versions = 3.1...