CVE-2024-4300 E-WEBInformationCo. FS-EZViewer(Web) - Sensitive Data Exposure

E-WEBInformationCo. FS-EZViewerWeb exposes sensitive information in the service. A remote attacker can obtain the database configuration file path through the webpage source code without login. Accessing this path allows attacker to obtain the database credential with the highest privilege and...

WordPress GamePlan Event And Gym Fitness Theme 1.5.13.2 Cross Site Scripting Vulnerability

WordPress GamePlan Event and Gym Fitness theme versions 1.0 through 1.5.13.2 suffer from a cross site scripting vulnerability. Exploit Title: GamePlan Event and Gym Fitness WordPress Theme - Reflected XSS v1.0 - v1.5.13.2 Date: August 4, 2017 Software Link:...