CVE Vulnerability Catalog

A vulnerability was identified in itsourcecode Online Admission System 1.0. It impacts an unknown function in the file /admin/schoolyear.php. Manipulation of the sy argument leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.

A SQL Injection vulnerability was found in itsourcecode Online Admission System Project 1.0 within the file /admin/login1.php, caused by improper handling of the User argument. The flaw can be exploited remotely and a public exploit is already available.

A vulnerability was detected in vgmstream up to r2117. The function ps_find_padding in the file src/coding/psx_decoder.c of the VAG File Handler component is affected. Manipulation results in an out-of-bounds read. The attack can be carried out remotely. A patch is available.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS. This issue affects QR Redirector from n/a through 2.0.5.

An Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data. This issue affects Events Manager from n/a through 7.4.5.

A Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Parameter Injection. This issue affects the plugin from n/a through 2.0.22.

A Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Admin Audit from n/a through 1.2.17.

Stored XSS vulnerability in Logo Showcase plugin up to version 4.0.4. An attacker can inject a malicious script that executes in the administrator's browser.

Stored XSS vulnerability in eCommerce Product Catalog plugin up to version 3.6.2. Allows injection of a persistent script that can execute in the user's browser context.

Missing authorization in WP Mailster plugin up to version 1.9.0.0. Allows exploitation of incorrectly configured access control security levels.

A vulnerability was found in DigitalCanion SA's product within the Configuration → Services → Music on Hold functionality of the web portal on TCP port 443, which fails to properly validate uploaded file types. An authenticated attacker can upload a malicious .so file instead of a WAV file, leading to remote code execution in the context of the affected process.

Mitel MiVoice Office 400 contains a directory traversal vulnerability in the web portal on TCP port 443, under Maintenance → File Management → File Browser. An authenticated attacker can access and delete files outside the intended directory, including Mitel application and underlying Linux system files.

A vulnerability was discovered in DigitalCanion's product where a privileged process loads an attacker-controlled .so file with a predictable module name without verifying its origin or integrity. The malicious module is then executed with the privileges of that process.

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The flaw exists within the web portal on TCP port 443, under Configuration → Users → Users List, in the “Microsoft Exchange mailbox” field, which fails to properly validate or sanitize user-supplied input before storing and rendering it.

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The flaw exists within the web portal on TCP port 443, under Configuration → Domains, specifically in the “Description” field, which fails to properly validate or sanitize user-supplied input before storing and rendering it.

Path traversal vulnerability in DigitalCanion's management portal, in the Maintenance → System Logs functionality. Allows access to files outside the intended directory, including sensitive system files.

A vulnerability in the backup restoration functionality allows an attacker with access to the configured backup repository to introduce arbitrary files during restoration. The mechanism fails to properly validate paths, file types, integrity, and authenticity of files within a restored TGZ archive.

A path traversal vulnerability was discovered in DigitalCanion's product that allows viewing or downloading sensitive system files over the portal https://<ip>:8443 via the Administration -> View Logs menu.

Missing authorization in Event Tickets plugin up to version 5.30.0. Allows exploitation of incorrectly configured access control security levels.

Stored XSS vulnerability in MP3 Audio Player by Sonaar plugin up to version 5.14.2. Allows injection of a persistent script that can execute in the administrator's browser.