Lucene search
+L

148583 matches found

NVD
NVD
added 2024/11/09 10:15 a.m.31 views

CVE-2024-50539

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in lodgix Lodgix.com Vacation Rental Website Builder lodgixcom-vacation-rental-listing-management-booking-plugin allows SQL Injection.This issue affects Lodgix.com Vacation Rental Website Builder: fro...

8.5CVSS0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/09 9:18 a.m.39 views

CVE-2024-50539 WordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in lodgix Lodgix.com Vacation Rental Website Builder lodgixcom-vacation-rental-listing-management-booking-plugin allows SQL Injection.This issue affects Lodgix.com Vacation Rental Website Builder: fro...

8.5CVSS0.00395EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/09 9:15 a.m.33 views

CVE-2024-51601

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...

8.5CVSS0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/09 9:03 a.m.25 views

CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...

8.5CVSS0.00395EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/09 9:03 a.m.56 views

CVE-2024-51601

CVE-2024-51601 is an SQL injection vulnerability in the WordPress plugin “Website price calculator” (versions n/a through 4.1) caused by improper neutralization of input in SQL queries. The issue allows unauthenticated or low-privilege users to manipulate the SQL command, leading to potential dat...

8.5CVSS5.9AI score0.00395EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 9:03 a.m.11 views

CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...

8.5CVSS5.9AI score0.00395EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/09 12:00 a.m.9 views

WordPress plugin Lodgix.Com Vacation Rental Website Builder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

8.5CVSS7.7AI score0.00395EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.15 views

PT-2024-34743 · Unknown · Maksym Marko Website Price Calculator

Name of the Vulnerable Software and Affected Versions: Maksym Marko Website price calculator versions n/a through 4.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection in the...

8.5CVSS8.4AI score0.00395EPSS
SaveExploits0References8
OSV
OSV
added 2024/11/08 6:15 a.m.6 views

CVE-2024-10993

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

8.8CVSS5.5AI score0.00741EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.17 views

WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Software Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera Type Plugin Vulnerable versions = 4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52347 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

6.5CVSS7AI score0.00217EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/08 12:00 a.m.6 views

Codezips Online Institute Management System 代码问题漏洞

Codezips Online Institute Management System is a Codezips open source online institute management system. A code issue vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from the parameter websiteimage in the file /managewebsite.php that can lead to...

8.8CVSS6.6AI score0.00741EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:00 a.m.8 views

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

6.4CVSS5.2AI score0.00303EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:00 a.m.15 views

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project and task management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:00 a.m.9 views

The vulnerability of the Markdown Parsing component of the JetBrains YouTrack software suite for managing projects and tasks allows attackers to perform cross-site scripting attacks.

The vulnerability of the Markdown Parsing component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:00 a.m.9 views

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:00 a.m.9 views

The vulnerability of the App Manifest component of the JetBrains YouTrack software environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the App Manifest component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/07 12:00 a.m.10 views

PT-2024-16685 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage website.php. The manipulation of the website image argument leads to unrestricted...

8.8CVSS7.4AI score0.00741EPSS
SaveExploits1References9
NVD
NVD
added 2024/11/06 9:15 p.m.20 views

CVE-2024-10941

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox 126...

6.5CVSS0.00405EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/06 8:05 p.m.25 views

CVE-2024-10941

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox 126...

0.00405EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/06 8:05 p.m.100 views

CVE-2024-10941

CVE-2024-10941 affects Firefox versions prior to 126. The issue is triggered by a malicious website embedding an iframe with a malformed URI, resulting in a browser crash that is described as non-exploitable. Public details consistently reference Firefox

6.5CVSS6.3AI score0.00405EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder