3547 matches found
WordPress Zoho Campaigns Plugin <= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software Zoho Campaigns Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32442 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afe9720b1fb1 Credits Majed Refaea Required...
CVE-2024-30239
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6...
CVE-2024-30239
CVE-2024-30239: Zoho Campaigns WordPress plugin is affected up to v2.0.6 with an SQL injection vulnerability due to improper/insufficient escaping. Connected sources indicate this entry has been patched in later versions; remediation is to upgrade to a newer release (beyond 2.0.6). Exploitation s...
CVE-2024-30239 WordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6...
CVE-2024-30239 WordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6...
WordPress Plugin Zoho Campaigns SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Zoho Campaigns suffers fro...
WordPress Zoho Campaigns Plugin <= 2.0.6 is vulnerable to SQL Injection
Software Zoho Campaigns Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30239 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 3207a07b73c1 Credits LVT-tholv2k Required privilege Contributor Publish...
Number withdrawn
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control, and other functional modules to support the entire lifecycle of desktop and server management. This CVE number has...
CVE-2024-21775
Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...
Sql injection
Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...
CVE-2024-21775 SQL Injection
Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...
CVE-2024-21775 SQL Injection
Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...
CVE-2024-21775
CVE-2024-21775 affects Zoho ManageEngine Exchange Reporter Plus (versions 5714 and below). The vulnerability is an Authenticated SQL injection in the report exporting feature caused by improper handling in the exporting workflow. Impact as described: high confidentiality, integrity, and sometimes...
CVE-2023-48792
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option...
CVE-2023-48793
Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature...
Sql injection
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option...
CVE-2023-48793
CVE-2023-48793 affects Zoho ManageEngine ADAudit Plus; versions through 7250 are susceptible to SQL injection in the aggregate report feature. The issue is supported by multiple sources (NVD/RH/CNNVD) with a CVSS v3.1 base score of 9.8 (CRITICAL). Remediation per the provided docs is to update to...
The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services arises from incorrect restrictions on the path to the restricted access directory. This allows attackers to gain unauthorized access to confidential information.
The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential...