Archive
29 July 2024
Vulnerabilities first published on this day (UTC), newest first.
66 results · Clear filters · Feed
-
Medium 5.4
Broken Access Control in Delphix
A flaw in versions of Delphix Data Control Tower (DCT) prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the application.
-
Medium 6.1CVE-2024-41810 Scanner template
HTML injection in HTTP redirect body
Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability m…
-
Medium 4.1
Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the design/header/welcome, design/header/logo_src, design/header/logo_src_small, and design/header/logo_alt system configs.They are intended to en…
-
Medium 6.3
SourceCodester Complaints Report Management System manage_user.php sql injection
A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file /admin/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can …
-
Medium 6.3
SourceCodester Complaints Report Management System manage_station.php sql injection
A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admin/manage_station.php. The manipulation of the argument id leads to sql injection. It is possible to …
-
Medium 6.3
SourceCodester Complaints Report Management System manage_complaint.php sql injection
A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/manage_complaint.php. The manipulation of the argument id leads to sql …
-
Medium 6.3
itsourcecode Society Management System check_admin.php sql injection
A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/check_admin.php. The manipulation of the argument username leads to sql injection. It is possible t…
-
Medium 6.3
itsourcecode Society Management System check_student.php sql injection
A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processing of the file check_student.php. The manipulation of the argument student_id leads to sql injection. The attack may be…
-
Medium 5.3
Mp3tag DLL tak_deco_lib.dll uncontrolled search path
A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library tak_deco_lib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to lau…
-
Medium 6.3
itsourcecode Society Management System student.php unrestricted upload
A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/student.php. The manipulation of the argument image leads to unrestricted upload. It is possible to ini…
-
Medium 6.3
itsourcecode Society Management System get_balance.php sql injection
A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/get_balance.php. The manipulation of the argument student_id leads to sql …
-
Medium 6.3
itsourcecode Society Management System get_price.php sql injection
A vulnerability classified as critical was found in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/get_price.php. The manipulation of the argument expenses_id leads to sql injection. T…
-
Medium 6.3
itsourcecode Online Food Ordering System editproduct.php unrestricted upload
A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch t…
-
Medium 5.9
Inline Related Posts < 3.8.0 - Admin+ Stored XSS
The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowe…
-
Medium 4.6
Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS
The Ultimate Blocks WordPress plugin before 3.2.0 does not validate and escape some of its post-grid block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform S…
-
Medium 4.7
Ultimate Classified Listings < 1.3 - Reflected XSS
The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
-
Medium 5.4
Email Encoder < 2.2.2 - Admin+ Stored XSS
The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting
-
Medium 5.5
WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF
The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when deleting affiliates, which could allow attackers to make a logged in user change delete them via a CSRF attack
-
Medium 6.3
TOTOLINK A3600R cstecgi.cgi setTelnetCfg command injection
A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This vulnerability affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument telnet_enabled leads to command injection. The …
-
Medium 6.9
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This…
-
Medium 6.3
TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection
A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ipDoamin leads to os command inject…
-
Medium 4.7
Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbit…
-
Medium 6.3
Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an u…
-
Medium 6.1CVE-2024-41640 Public exploit
Cross Site Scripting (XSS) vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via craft…
-
Medium 5.4
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privil…
-
Medium 6.1
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privil…