PT-2023-28786 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: A function pointer hijacking issue was discovered in the mjs get ptr function, allowing attackers to execute arbitrary code via a crafted input. Recommendations: For version 2.20.0, consider disabling t...

PYSEC-2023-178

plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the ++api++ traverser is accidentally used multiple times in a url, handling it takes increasingly longer, making the server less...

PT-2023-31525 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6 Description: A critical issue was found in the software, affecting an unknown part of the file /category/order/hits/copyright/46/finish/1/list/1. The issue can be exploited through SQL injection by manipulating the input wit...

07FLY CRM SQL Injection Vulnerability

07FLY CRM is an OA office system of China Zero Takeoff 07FLY. A SQL injection vulnerability exists in 07FLY CRM version V2, which originates from a SQL injection vulnerability in the parameter account of the component Administrator Login Page...

CVE-2023-4670

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Innosa Probbys allows SQL Injection. This issue affects Probbys: before 2...

CVE-2023-4670

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Innosa Probbys allows SQL Injection.This issue affects Probbys: before 2...

PT-2023-31400 · Infinitietech · Infinitietech Taskhub

Name of the Vulnerable Software and Affected Versions: infinitietech taskhub version 2.8.7 Description: A critical issue has been found in the GET Parameter Handler component, specifically affecting the /home/get tasks list file. The manipulation of the project/status/user id/sort/search argument...

Innosa Probbys SQL Injection Vulnerability

Innosa Probbys is an application from Innosa, Inc. An SQL injection vulnerability exists in Innosa Probbys versions prior to 2.0 that stems from improper neutralization of special elements...

PT-2023-27833 · Usermin · Usermin

Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the MIME type programs tab, allowing remote attackers to inject arbitrary web script or HTML via the description field when creating a new MIME type program...

Webmin Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the MIME type program tab...

Webmin Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the MIME type program tab...

Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the cron jobs tab of the...

WordPress plugin Crayon Syntax Highlighter Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CouchCMS Input Validation Error Vulnerability

CouchCMS is an open source content management system CMS for designers. A security vulnerability exists in CouchCMS version v2.3. An attacker exploited the vulnerability to redirect victim users to an arbitrary website via a specially crafted URL...

CVE-2023-41575

Multiple stored cross-site scripting XSS vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters...

PT-2023-5660 · Unknown · Blood Bank & Donor Management

Name of the Vulnerable Software and Affected Versions: Blood Bank & Donor Management version 2.2 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities in the /bbdms/sign-up.php file. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML...

CVE-2023-4792

The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...

WordPress plugin Duplicate Post Page Menu & Custom Post Type security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-27837 · Usermin · Usermin

Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: Multiple stored cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages, including public key details, Export key, sign...

Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset version 2.1.0 and prior versions have an authorization issue vulnerability that stems from incorrect authorization checks in SQLLab. An attacker can exploit the vulnerability to...