CVE-2023-7059: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...

PT-2023-32860

Name of the Vulnerable Software and Affected Versions SourceCodester School Visitor Log e-Book version 1.0 Description A problem was found in the file log-book.php, where the manipulation of the Full Name argument leads to cross-site scripting. The attack can be launched remotely. Recommendations...

School Visitor Log e-Book Cross-Site Scripting Vulnerability

School Visitor Log e-Book is a School Visitor Log e-Book by Remy Andrade Personal Developer. School Visitor Log e-Book suffers from a cross-site scripting vulnerability that stems from a cross-site scripting vulnerability in log-book.php...

CVE-2023-32064

Summary (CVE-2023-32064): OroCommerce exposes an access control vulnerability where back-office users can view information in Customer and Customer User menus due to insufficient ACL checks. This affects OroCommerce package with customer portal features. The issue is mitigated by upgrading to ver...

WordPress plugin Web Push Notifications security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Visitors Traffic Real Time Statistics <= 7.2 - Missing Authorization via multiple AJAX actions

Description The Visitors Traffic Real Time Statistics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 7.2. This makes it possible for authenticated attackers, with subscriber-level...

Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cobrowse-visitor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8542 Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-8835

Name of the Vulnerable Software and Affected Versions: Popup Builder WordPress plugin versions prior to 4.2.3 Description: The issue allows simple visitors to update existing popups and inject raw JavaScript, leading to Stored XSS attacks. This could enable attackers to conduct cross-site scripti...

Visitor Management System SQL Injection Vulnerability

Visitor Management System is a visitor management system. A SQL injection vulnerability exists in Visitor Management System v1.0, which originates from the parameter id of manageuser.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to...

CVE-2023-5918

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...

CVE-2023-5918 SourceCodester Visitor Management System manage_user.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...

CVE-2023-5918 SourceCodester Visitor Management System manage_user.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...

CVE-2023-5918

CVE-2023-5918 affects SourceCodester Visitor Management System v1.0. The vulnerability is an SQL injection arising from the manipulation of the id parameter in the file manage_user.php , allowing remote exploitation. Multiple connected sources corroborate this as a critical issue with unauthentic...

PT-2023-32417 · Sourcecodester · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Visitor Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Visitor Management System. The issue affects an unknown function of the file manage user.php. The manipulation of the i...

CVE-2023-5918: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...

Visitor Management System SQL注入漏洞

Visitor Management System is a visitor management system. A SQL injection vulnerability exists in Visitor Management System v1.0, which originates from the parameter id of manageuser.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to...

CVE-2023-5089 Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled...