CVE Vulnerability Catalog

W systemie SourceCodester Online Student Result System w wersji 1.0 wykryto podatność, która dotyczy nieznanej funkcjonalności pliku /login.php. Manipulacja argumentem Username prowadzi do wstrzyknięcia SQL, co umożliwia zdalne przeprowadzenie ataku.

A SQL injection vulnerability was found in code-projects Simple Food Ordering System 1.0 in editcategory.php. Manipulation of the cname argument allows remote attack. The exploit is publicly available.

Zidentyfikowano słabość w systemie zarządzania odwiedzającymi w Campcodes Online Apartment w wersji 1.0. Problem dotyczy nieznanej funkcji pliku /forgot-password.php, gdzie manipulacja argumentem email prowadzi do wstrzyknięcia SQL.

A vulnerability was discovered in code-projects E-Commerce Website 1.0 involving SQL injection in the file /pages/product_add_qty.php. Manipulation of the prod_id argument allows remote attack execution. The exploit is publicly available and may be used.

The WP Scraper plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in all versions up to and including 5.8.1 via the wp_scraper_extract_content function. Authenticated attackers with Administrator-level access and above can make web requests to arbitrary locations from the web application, potentially allowing them to query and modify information from internal services. On Cloud instances, this issue allows for metadata retrieving.

The Custom 404 Pro plugin for WordPress is vulnerable to time-based SQL Injection via the 'path' parameter in all versions up to, and including, 3.12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The Page Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the admin_process_widget_page_change function. This makes it possible for unauthenticated attackers to modify widget page block configurations via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.6.1. This is due to missing or incorrect nonce validation on the wpcmt_sync action in the wpcmt_request_handler function, allowing unauthenticated attackers to trigger comment synchronization via a forged request.

The Newsup theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the newsup_admin_info_install_plugin() function in all versions up to, and including, 5.0.10. This allows unauthenticated attackers to install the ansar-import plugin.

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. This makes it possible for attackers to trick authenticated administrators into activating or deactivating specified plugins via a forged request, such as clicking on a malicious link or visiting a compromised page.

Wtyczka GSheetConnector dla Gravity Forms w WordPressie jest podatna na obejście autoryzacji w wersjach mniejszych lub równych 1.3.27. Problem wynika z braku sprawdzenia uprawnień w funkcji 'install_plugin'.

The Code Quality Control Tool plugin for WordPress is vulnerable to Sensitive Information Exposure in version 2.1 through publicly exposed log files. This allows unauthenticated attackers to view potentially sensitive information contained in the exposed log files.

The Easy Plugin Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eps' shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Wtyczka WooCommerce Designer Pro dla WordPressa, używana przez motyw Pricom - Printing Company & Design Services, jest podatna na nieautoryzowane usuwanie plików z powodu niewystarczającej walidacji ścieżek plików w funkcji 'wcdp_save_canvas_design_ajax' we wszystkich wersjach do 1.9.26 włącznie. Umożliwia to nieautoryzowanym atakującym usunięcie wszystkich plików w dowolnym katalogu na serwerze.

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

Vulnerability of improper exception handling in the print module. Successful exploitation may affect availability.

Vulnerability of improper exception handling in the print module. Successful exploitation may affect availability.

W kodzie projektu E-Commerce Website w wersji 1.0 zidentyfikowano podatność. Nieznana funkcja w pliku /pages/delete_order_details.php umożliwia manipulację argumentem order_id, co może prowadzić do wstrzyknięcia SQL.

A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0, impacting an unknown function of /admin-profile.php. Manipulation of the mobilenumber argument results in SQL injection, and remote exploitation is possible. The exploit has been made public.