Yuyudhn

يتعرض هذا المكون الإضافي لثغرة عامة من نوع «حقن SQL»، وهي تقنية يتم من خلالها إدراج عبارات SQL ضارة في حقول الإدخال لتنفيذها. ويحدث ذلك بسبب عدم كفاية عملية «الهروب» (escaping) للبيانات التي يقدمها المستخدم، وعدم إعداد استعلام SQL بشكل سليم. يمكن للمهاجمين المصادق عليهم الذين يتمتعون بحقوق وصول على مستوى المسؤول أو أعلى استغلال المعلمة `curselrevs[]` لإضافة استعلامات إضافية واستخراج معلومات حساسة من قاعدة البيانات.

The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue affects the WpDevArt Booking calendar, Appointment Booking System due to a Missing Authorization vulnerability. This vulnerability allows exploitation of incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. This vulnerability affects the Ebook Store, enabling potential unauthorized access due to missing authorization checks.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue affects the Pinpoint Booking System, allowing for functionality misuse due to an External Control of Assumed-Immutable Web Parameter vulnerability.

The issue affects the WpDevArt Booking calendar, Appointment Booking System, allowing manipulation of hidden fields due to an External Control of Assumed-Immutable Web Parameter vulnerability. This enables an attacker to modify assumed-immutable web parameters, potentially leading to unauthorized access or data manipulation.

The issue is related to a Missing Authorization vulnerability, which allows functionality misuse. This vulnerability affects the Event Espresso 4 Decaf software.

The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.

The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorized access to certain features or data.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows Path Traversal in the Web-Settler Landing Page Builder – Free Landing Page Templates.

The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. This can potentially lead to unauthorized access to sensitive files on the server.

The issue is related to a Missing Authorization vulnerability, which allows for Functionality Misuse in Shoaib Saleem WP Post Rating.

The issue is related to incorrect default permissions, allowing access to functionality not properly constrained by Access Control Lists (ACLs). This means that certain features or data may be accessible without the appropriate permissions, potentially leading to unauthorized access or actions.

The issue is related to a Missing Authorization vulnerability in the Quiz Maker team Quiz Maker.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potentially malicious scripts to be injected into web pages.