WordPress WPC Smart Quick View for WooCommerce plugin <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Ulyses Saicha in WordPress Plugin WPC Smart Quick View for WooCommerce versions = 4.0.2...

WordPress Plugin WPC Smart Quick View for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-3696

A vulnerability was found in Campcodes House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file viewpayment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

Campcodes House Rental Management System SQL注入漏洞

Campcodes House Rental Management System is a house rental management system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes House Rental Management System, which results from an SQL injection in the id parameter of the viewpayment.php file...

Aim Web API vulnerable to Remote Code Execution

A critical Remote Code Execution RCE vulnerability was identified in the aimhubio/aim project, specifically within the /api/runs/search/run/ endpoint, affecting versions = 3.0.0. The vulnerability resides in the runsearchapi function of the aim/web/api/runs/views.py file, where improper restricti...

CVE-2024-2195

A critical Remote Code Execution RCE vulnerability was identified in the aimhubio/aim project, specifically within the /api/runs/search/run/ endpoint, affecting versions = 3.0.0. The vulnerability resides in the runsearchapi function of the aim/web/api/runs/views.py file, where improper restricti...

CVE-2024-3533

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...

CVE-2024-3533

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...

CVE-2024-3532

A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown function of the file attendanceview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to launch the attack...

CVE-2024-3531

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file coursesview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated...

CVE-2024-3533

The public CVE-2024-3533 describes a cross-site scripting vulnerability in Campcodes Complete Online Student Management System v1.0, specifically in the academic_year_view.php file. The vulnerability arises from manipulation of the FirstRecord argument, enabling XSS. The issue is exploitable remo...

CVE-2024-3530

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file Marksview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can be initiated...

CVE-2024-3529

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problematic. This affects an unknown part of the file studentsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-3528

A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file unitsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be launche...

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which is caused by a cross-site scripting...

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which originates from a cross-site scripting...

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which is caused by a cross-site scripting...

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software. A cross-site scripting vulnerability exists in Student Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the FirstRecord parameter of the unitsview.php...

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software from the individual developer Sk. Amir Hamza of Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which originates from a cross-site scripting vulnerability ...

CVE-2024-3523

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...