CVE-2024-51487 Insufficient Validation in Catalog (Activation/Deactivation) in Ampache

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change...

CVE-2024-51487

CVE-2024-51487 — Ampache CSRF token validation issue : Multiple connected sources confirm a vulnerability in Ampache where the token parsing/CSRF validation does not correctly handle activation/deactivation of catalog (and related directory actions). This flaw could allow an attacker to trigger C...

CVE-2024-50237

creationtimestamp| type| source ---|---|--- 2024-11-09 11:49:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113452841447399084 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-50539

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in lodgix Lodgix.com Vacation Rental Website Builder lodgixcom-vacation-rental-listing-management-booking-plugin allows SQL Injection.This issue affects Lodgix.com Vacation Rental Website Builder: fro...

CVE-2024-50539 WordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in lodgix Lodgix.com Vacation Rental Website Builder lodgixcom-vacation-rental-listing-management-booking-plugin allows SQL Injection.This issue affects Lodgix.com Vacation Rental Website Builder: fro...

CVE-2024-51601

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...

CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...

CVE-2024-51601

CVE-2024-51601 is an SQL injection vulnerability in the WordPress plugin “Website price calculator” (versions n/a through 4.1) caused by improper neutralization of input in SQL queries. The issue allows unauthenticated or low-privilege users to manipulate the SQL command, leading to potential dat...

CVE-2024-51601 WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Maksym Marko Website price calculator price-calculator-to-your-website allows SQL Injection.This issue affects Website price calculator: from n/a through = 4.1...

WordPress plugin Lodgix.Com Vacation Rental Website Builder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

PT-2024-34743 · Unknown · Maksym Marko Website Price Calculator

Name of the Vulnerable Software and Affected Versions: Maksym Marko Website price calculator versions n/a through 4.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection in the...

CVE-2024-10993

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Software Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera Type Plugin Vulnerable versions = 4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52347 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

Codezips Online Institute Management System 代码问题漏洞

Codezips Online Institute Management System is a Codezips open source online institute management system. A code issue vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from the parameter websiteimage in the file /managewebsite.php that can lead to...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project and task management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Markdown Parsing component of the JetBrains YouTrack software suite for managing projects and tasks allows attackers to perform cross-site scripting attacks.

The vulnerability of the Markdown Parsing component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

PT-2024-16685 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage website.php. The manipulation of the website image argument leads to unrestricted...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

The vulnerability of the App Manifest component of the JetBrains YouTrack software environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the App Manifest component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...