CVE-2024-29320

Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php...

PT-2024-22861 · Wallos · Wallos

Name of the Vulnerable Software and Affected Versions: Wallos versions prior to 1.15.3 Description: The issue is related to SQL Injection via the category and payment parameters to the "/subscriptions/get.php" API endpoint. This allows for potential exploitation. Recommendations: For versions pri...

Wallos < 1.11.2 - File Upload RCE

Exploit Title: Wallos - File Upload RCE Authenticated Date: 2024-03-04 Exploit Author: [email protected] Vendor Homepage: https://github.com/ellite/Wallos Software Link: https://github.com/ellite/Wallos Version: -----------------------------29251442139...

Wallos Shell Upload Vulnerability

Exploit Title: Wallos - File Upload RCE Authenticated Date: 2024-03-04 Exploit Author: email protected Vendor Homepage: https://github.com/ellite/Wallos Software Link: https://github.com/ellite/Wallos Version: -----------------------------2925144213...

CVE-2024-22776

Wallos 0.9 is vulnerable to Cross Site Scripting XSS in all text-based input fields without proper validation, excluding those requiring specific formats like date fields...

CVE-2024-22776

Wallos 0.9 is vulnerable to Cross Site Scripting XSS in all text-based input fields without proper validation, excluding those requiring specific formats like date fields...

PT-2024-19560 · Wallos · Wallos

Name of the Vulnerable Software and Affected Versions: Wallos version 0.9 Description: The issue concerns Cross Site Scripting XSS in text-based input fields due to a lack of proper validation, excluding fields that require specific formats like date fields. Recommendations: For Wallos version 0....

CVE-2024-22776

Wallos 0.9 is affected by a Cross Site Scripting (XSS) vulnerability in all text-based input fields, due to insufficient input validation (fields excluding those with specific formats like dates). The vulnerability is reported across multiple sources (NVD/Red Hat/CVE records and third-party catal...

CVE-2024-22776

Wallos 0.9 is vulnerable to Cross Site Scripting XSS in all text-based input fields without proper validation, excluding those requiring specific formats like date fields...

CVE-2024-22776

Wallos 0.9 is vulnerable to Cross Site Scripting XSS in all text-based input fields without proper validation, excluding those requiring specific formats like date fields...

Wallos Security Vulnerabilities

Wallos is an open source personal subscription tracker from the individual developer Miguel Ribeiro. A security vulnerability exists in Wallos version 0.9, which stems from the vulnerability to cross-site scripting XSS in all text-based input fields...