CVE-2022-3789 Tim Campus Confession Wall share.php sql injection

A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument postid leads to sql injection. The exploit has been disclosed to the public and may be used...

Tim Campus Confession Wall SQL注入漏洞

Tim Campus Confession Wall is a confession wall organized by Tim Campus. Tim Campus Confession Wall suffers from a SQL injection vulnerability that stems from unknown functionality in the file share.php, where manipulation of the parameter postid can result in sql injection...

PT-2022-24126 · Unknown · Tim Campus Confession Wall

Name of the Vulnerable Software and Affected Versions: Tim Campus Confession Wall affected versions not specified Description: A critical issue has been found in Tim Campus Confession Wall, affecting an unknown functionality of the file share.php. The manipulation of the post id argument leads to...

CVE-2022-3789 Tim Campus Confession Wall share.php sql injection

A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument postid leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2022-2117

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-API endpoint which provides unauthenticated users with donor information even when the donor wall is not enabled. This functionality has been...

CVE-2022-2117

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-API endpoint which provides unauthenticated users with donor information even when the donor wall is not enabled. This functionality has been...

WordPress plugin GiveWP 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

PT-2022-14899 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP plugin for WordPress versions up to, and including, 2.20.2 Description: The issue allows unauthenticated users to access donor information through the "/donor-wall" REST-API endpoint, even when the donor wall is not enabled. This...

GHSA-HC34-F55M-RH3M Jenkins Wall Display Plugin Cross-site Scripting vulnerability

Wall Display Master Project Plugin does not properly escape the customTheme query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...

Jenkins Wall Display Plugin Cross-site Scripting vulnerability

Wall Display Master Project Plugin does not properly escape the customTheme query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...

Russia-Ukraine Cybersecurity Updates

Cyberattacks are a distinct concern in the Russia-Ukraine conflict, with the potential to impact individuals and organizations far beyond the physical frontlines. With events unfolding rapidly, we want to provide a single channel by which we can communicate to the security community the major...

CVE-2021-20043

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

Cross site request forgery (csrf)

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

CVE-2021-40214

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component...

CVE-2021-40214

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component...

Cross site scripting

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component...

CVE-2021-40214

Gibbon v22.0.00 has a stored XSS in the wall messages component (CVE-2021-40214). The affected software/function is the wall messages feature of Gibbon core, version 22.0.00. The root cause is a stored cross-site scripting flaw within this component. Impact per provided data is limited to confide...

CVE-2021-40214

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component...

Gibbon 跨站脚本漏洞

Gibbon is a school platform that solves real-world problems that educators encounter every day. A cross-site scripting vulnerability exists in Gibbon that stems from a stored XSS vulnerability in the wall message component in Gibbon v22.0.00...

CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...