14195 matches found
CVE-2022-43288
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the orderby parameter at /rukovoditel/index.php?module=logs/view&type=php...
CVE-2022-43288: Improper Neutralization of Special Elements used in an SQL Command
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the orderby parameter at /rukovoditel/index.php?module=logs/view&type=php...
Rukovoditel SQL注入漏洞
Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software features project management, customer relationship management, and more. Rukovoditel v3.2.1 version of a security vulnerability , the vulnerability stems from the attacker can be...
GHSA-3PPM-FWHM-QQG6 FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...
CVE-2022-43320
FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /web/admin/index.php?r=log%2Fview-layer...
FeehiCMS 跨站脚本漏洞
FeehiCMS is a Php-based CMS website builder for individual developers. feehiCMS version v2.1.1 has a security vulnerability that originates from an id parameter on /web/admin/index.php?r=log/view-layer found to contain a reflective cross-site scripting XSS vulnerability. No detailed vulnerability...
Input validation
Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to alter current user session. On successful exploitation, the attacker can view or modify information, causing a limited impact on confidentiality and integrity...
CVE-2022-43570
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language XML external entity XXE injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error...
Xxe
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language XML external entity XXE injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error...
Cross site scripting
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation JSON in a query parameter when outputmode=radio...
PT-2022-26973 · Splunk · Splunk Enterprise
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.1.12 Splunk Enterprise versions prior to 8.2.9 Splunk Enterprise versions prior to 9.0.2 Description: The issue allows an authenticated user to perform an extensible markup language XML external entity XX...
CVE-2022-43570: Improper Restriction of XML External Entity Reference
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language XML external entity XXE injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error...
CVE-2022-40131
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
CVE-2022-40131
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
CVE-2022-40131
The CVE-2022-40131 entry concerns the a3rev Software Page View Count plugin for WordPress, affected in versions
CVE-2022-40131 WordPress Page View Count plugin <= 2.5.5 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
PT-2022-25233 · A3Rev · A3Rev Software Page View Count Plugin
Name of the Vulnerable Software and Affected Versions: a3rev Software Page View Count plugin versions = 2.5.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to reset the plugin settings. Recommendations: For a3rev Software Page View...
CVE-2022-40131: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
WordPress plugin a3rev Software Page View Count 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...