Show filters
449 Total Results
Displaying 21-30 of 449
Sort by:
Attacker Value
Unknown

CVE-2024-25218

Disclosure Date: February 14, 2024 (last updated February 26, 2025)
A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php.
Attacker Value
Unknown

CVE-2023-46446

Disclosure Date: November 14, 2023 (last updated February 25, 2025)
An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."
Attacker Value
Unknown

CVE-2023-46445

Disclosure Date: November 14, 2023 (last updated February 25, 2025)
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
Attacker Value
Unknown

CVE-2023-38515

Disclosure Date: November 13, 2023 (last updated February 25, 2025)
Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.
Attacker Value
Unknown

CVE-2023-32592

Disclosure Date: November 09, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin <= 1.0.2 versions.
Attacker Value
Unknown

CVE-2023-47237

Disclosure Date: November 09, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versions.
Attacker Value
Unknown

CVE-2023-25994

Disclosure Date: November 09, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.4.2 versions.
Attacker Value
Unknown

CVE-2023-40852

Disclosure Date: October 16, 2023 (last updated February 25, 2025)
SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.
Attacker Value
Unknown

CVE-2023-40851

Disclosure Date: October 16, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.
Attacker Value
Unknown

CVE-2023-42359

Disclosure Date: September 18, 2023 (last updated February 25, 2025)
SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the val-username parameter in /index.php.