Hakiduck

تتعلق المشكلة بثغرة أمنية تتعلق بـ«تجاوز المسار النسبي»، والتي تسمح بـ«تجاوز المسار». تؤثر هذه المشكلة على برنامج s2Member، مما يتيح إمكانية الوصول غير المصرح به إلى الملفات.

تتعلق المشكلة بثغرة أمنية تتعلق بحقن SQL (SQL Injection) ناتجة عن عدم معالجة العناصر الخاصة المستخدمة في أمر SQL بشكل صحيح. وهذا يتيح شن هجمات حقن SQL.

تتعلق المشكلة بـ«التعقيم غير السليم للمدخلات أثناء إنشاء صفحات الويب»، والمعروف أيضًا باسم «التنفيذ البرمجي عبر المواقع» (Cross-site Scripting). وهذا يتيح شن هجمات XSS المنعكسة.

تتعلق المشكلة بثغرة أمنية تتعلق بنقص الصلاحيات، مما يسمح باستغلال مستويات أمان التحكم في الوصول التي تم تكوينها بشكل غير صحيح.

تتعلق المشكلة بثغرة أمنية تتعلق بحقن SQL (SQL Injection) ناتجة عن عدم معالجة العناصر الخاصة المستخدمة في أمر SQL بشكل صحيح. وهذا يتيح شن هجمات حقن SQL.

The issue is related to an Improper Control of Generation of Code ('Code Injection') vulnerability, which allows Code Injection.

Name of the Vulnerable Software and Affected Versions: Owen Cutajar & Hyder Jaffari WordPress Auction Plugin versions n/a through 3.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions n/a through 3.7, update to a version that fixes this issue, as the current version is affected by Stored XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which can be exploited by attackers.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. The problem enables an attacker to inject malicious code into a website, potentially affecting users who visit the compromised page.

The issue is related to Improper Neutralization of Special Elements Used in a Template Engine, which allows Command Injection. This could potentially be exploited through API endpoints or vulnerable parameters, although specific details about exploitation are not provided.

The issue affects Event Tickets with Ticket Scanner, allowing Server Side Include (SSI) Injection due to improper neutralization of special elements used in a template engine. This can lead to security risks.

The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection' vulnerability, which allows Blind SQL Injection.

The issue is related to an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. This vulnerability allows for remote attacks due to flaws in the template engine.

Name of the Vulnerable Software and Affected Versions: Namaste! LMS versions through 2.6.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Reflected XSS attacks. Recommendations: For versions through 2.6.2, update to a version that contains a fix for this issue, as the current version is affected by the Reflected XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Namaste! LMS versions through 2.6.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. Recommendations: For versions through 2.6.2, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: WP SEO – Calin Vingan Premium SEO Pack versions 1.6.001 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For versions 1.6.001 and earlier, update to a version that fixes this issue, as the current version is affected by the SQL Injection vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Product Filter by WBW versions 2.7.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For versions 2.7.0 and earlier, update to a version later than 2.7.0 to resolve the issue. As a temporary workaround, consider restricting access to the SQL command functionality to minimize the risk of exploitation.

The issue is related to Deserialization of Untrusted Data, which allows Object Injection.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to manipulate database queries and potentially gain unauthorized access.