Vulnerabilidades

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking Manager for WooCommerce…

The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.…

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in all versions up to, and including, 3.3.66 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to…

The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to submit forged e-commerce conversion events to the site's configured server-side advertising conversion APIs using the site's stored credentials.

The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in the front-end package templates, allowing users with the Author role or above to store a title that results in arbitrary JavaScript execution in the browser of any user, including unauthenticated…

The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in the system, including tickets outside their granted scope.

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.

SourceCodester Modern Loan Management System 1.0 es vulnerable a inyección SQL en ajaxData.PHP a través de los parámetros district_id, division_id, region_id y ward_id.

The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks.

A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This allows specially crafted package names, which begin with a hyphen, to be misinterpreted as command options by apt-get. Successful…

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

SourceCodester Tailor Management System 1.0 es vulnerable a inyección SQL en customeredit.php?id=1.

Sistema de Gestión de Sastres SourceCodester 1.0 es vulnerable a inyección SQL en addmeasurement.PHP?id=1.

El Sistema de Gestión de Membresías CodeAstro 1.0 es vulnerable a inyección SQL en renew.php a través del parámetro membershipType.

CodeAstro Membership Management System 1.0 es vulnerable a inyección SQL en el endpoint edit_type.PHP mediante el parámetro id.

CodeAstro Membership Management System 1.0 es vulnerable a inyección SQL en /edit_member.PHP?id=1.

El Sistema de Gestión de Membresías CodeAstro 1.0 es vulnerable a inyección SQL en report.php y revenue_report.php a través del parámetro fromDate.

Sistema de Gestión de Membresías CodeAstro 1.0 es vulnerable a inyección SQL en /delete_members.PHP?id=1.

CodeAstro Membership Management System 1.0 es vulnerable a inyección SQL en /memberProfile.PHP?id=1.

El Sistema de Gestión de Membresías CodeAstro 1.0 es vulnerable a inyección SQL en /delete_membership.PHP?id=1.

El Sistema de Gestión de Membresías CodeAstro 1.0 es vulnerable a inyección SQL en /print_membership_card.PHP?id=1.

IBM Engineering Requirements Management DOORS y DOORS Web Access 9.7.2.1 hasta 9.7.2.11, y 9.6.1.1 hasta 9.6.1.13 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a un atacante no autenticado incrustar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista…

IBM Engineering Requirements Management DOORS y DOORS Web Access 9.7.2.1 hasta 9.7.2.11, y 9.6.1.1 hasta 9.6.1.13 no limitan la longitud de una conexión, lo que podría permitir que se produzca un ataque de denegación de servicio HTTP Slowloris. Esto puede hacer que el servidor web deje de responder.

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.