Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall
AFFECTED_PRODUCTS:
Pligg Pligg Cms
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's getRoomUpgradeHistory function will infinitely recurse in this case, causing the code to hang. This me...
AFFECTED_PRODUCTS:
Matrix Javascript Sdk
Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gaining control of that namespace. Version 0.7...
AFFECTED_PRODUCTS:
Projectcapsule Capsule
A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
AFFECTED_PRODUCTS:
Typecho Typecho,
Typecho Typecho
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.
AFFECTED_PRODUCTS:
Newlib Project Newlib
A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The...
AFFECTED_PRODUCTS:
Demozx Gf Cms
A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as 45ac90d6d1f82716f77db...
AFFECTED_PRODUCTS:
Gotribe Gotribe Admin
A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
AFFECTED_PRODUCTS:
3Ds 3dexperience
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
AFFECTED_PRODUCTS:
3Ds 3dexperience
An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.
AFFECTED_PRODUCTS:
3Ds 3dexperience
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.
AFFECTED_PRODUCTS:
Pligg Pligg Cms
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
AFFECTED_PRODUCTS:
Keyfactor Aws Orchestrator
Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.
AFFECTED_PRODUCTS:
Friendica Friendica
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure.
AFFECTED_PRODUCTS:
Keyfactor Command,
Keyfactor Command
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability
exists that could cause a crash of the Accutech Manager when receiving a specially crafted
request over port 2536/TCP.
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
AFFECTED_PRODUCTS:
Siamonhasan Warehouse Inventory System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2.
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php
AFFECTED_PRODUCTS:
Arajajyothibabu School Management System
ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.
AFFECTED_PRODUCTS:
Jerryhanjj Erp