CVE Vulnerability Catalog

EIP Plus opracowany przez Hundred Plus ma podatność na arbitralne przesyłanie plików, co pozwala zdalnym atakującym z uprawnieniami na przesyłanie i uruchamianie backdoorów w postaci powłok webowych, umożliwiając tym samym wykonanie dowolnego kodu na serwerze.

A SQL injection vulnerability has been identified in SourceCodester Farm Management System 1.0 in the /review.php file via manipulation of the pid argument. The attack can be performed remotely, and the exploit has been publicly disclosed.

EIP Plus opracowany przez Hundred Plus ma podatność na słaby mechanizm odzyskiwania hasła, co pozwala nieautoryzowanemu zdalnemu atakującemu przewidzieć lub przeprowadzić atak brute-force na link 'zapomniałem hasła', co umożliwia skuteczne zresetowanie hasła dowolnego użytkownika.

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

SQL Injection vulnerability in U-Office Force by e-Excellence allows an authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

Wykryto lukę bezpieczeństwa w rymcu forest, która dotyczy funkcji getAll/addDic/getAllDic/deleteDic w pliku UserDicController.java. Manipulacja tą funkcją prowadzi do braku autoryzacji, co może umożliwić zdalny atak.

A missing authorization vulnerability was identified in rymcu forest in the GlobalResult function of src/main/java/com/rymcu/forest/web/api/bank/BankController.java. The attack can be initiated remotely. The product uses a rolling release model, so no specific version information is available.

In liweiyi ChestnutCMS up to 1.5.8, the resourceDownload function in /dev-api/common/download is vulnerable to path traversal via manipulation of the path argument. The attack can be launched remotely, and the exploit is publicly available.

A vulnerability in OpenClinica Community Edition up to 3.12.2/3.13 affects an unknown part of the file /ImportCRFData?action=confirm of the CRF Data Import component. Manipulating the xml_file argument results in path traversal. The attack can be initiated remotely, and the exploit has been made public.

A vulnerability in OpenClinica Community Edition up to 3.12.2/3.13 affects some unknown functionality of the file /ImportCRFData?action=confirm of the CRF Data Import component. Manipulating the xml_file argument leads to xml injection. The attack can be launched remotely, and the exploit has been disclosed to the public.

In 70mai X200 up to version 20251019, there is a file inclusion vulnerability in the Init Script Handler component. The attack requires local access and is difficult to exploit, but the exploit is public.

A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the Backend component. The manipulation of the argument Name leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed to the public and may be used.

A flaw was found in code-projects Responsive Hotel Site 1.0 allowing SQL injection in /admin/roomdel.php. Manipulating the ID argument enables remote attacks. The exploit has been published and may be used.

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Saphali LiqPay for donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saphali_liqpay' shortcode in all versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Wtyczka Alex Reservations: Smart Restaurant Booking dla WordPressa jest podatna na nieautoryzowane przesyłanie plików z powodu braku walidacji typu pliku w punkcie końcowym REST /wp-json/srr/v1/app/upload/file we wszystkich wersjach do i włącznie z 2.2.3. Umożliwia to uwierzytelnionym atakującym z dostępem na poziomie Administratora przesyłanie dowolnych plików na serwer dotkniętej witryny.

The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' functionality in all versions up to, and including, 2.5.4. This makes it possible for authenticated attackers with Administrator-level access and above to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

The Quick Featured Images plugin for WordPress is vulnerable to SQL Injection via the 'delete_orphaned' function in all versions up to and including 13.7.3 due to insufficient escaping and lack of preparation on the SQL query. This allows authenticated attackers with Editor-level access and above to append additional SQL queries, provided they can convince an author-level user or higher to add a malicious custom field value.

Wtyczka Mail Mint dla WordPressa jest podatna na nieautoryzowane przesyłanie plików z powodu braku walidacji typu pliku w funkcji process_contact_attribute_import we wszystkich wersjach do i włącznie z 1.18.10. Umożliwia to uwierzytelnionym atakującym z dostępem na poziomie Administratora i wyżej przesyłanie dowolnych plików na serwer dotkniętej witryny.

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/envira-convert/v1/bulk-convert' REST API endpoint in all versions up to, and including, 1.11.0. This makes it possible for authenticated attackers, with contributor-level access and above, to convert galleries to Envira galleries.