| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1695 | 4.3 | The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form. | 2022-06-15 19:34:00 | 2022-06-08 10:15:00 |
| CVE-2022-1709 | 4.3 | The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack | 2022-06-15 19:33:00 | 2022-06-08 10:15:00 |
| CVE-2021-44266 | 4.3 | GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter. | 2022-06-15 19:27:00 | 2022-06-11 15:15:00 |
| CVE-2022-1692 | 7.5 | The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to p | 2022-06-15 19:24:00 | 2022-06-08 10:15:00 |
| CVE-2022-1690 | 4.0 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection | 2022-06-15 19:10:00 | 2022-06-08 10:15:00 |
| CVE-2022-1689 | 4.0 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection | 2022-06-15 19:07:00 | 2022-06-08 10:15:00 |
| CVE-2022-1688 | 4.0 | The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections | 2022-06-15 19:00:00 | 2022-06-08 10:15:00 |
| CVE-2022-24969 | 5.8 | bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability. | 2022-06-15 18:56:00 | 2022-06-09 16:15:00 |
| CVE-2022-31386 | 6.4 | A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter. | 2022-06-15 18:55:00 | 2022-06-09 14:15:00 |
| CVE-2022-31390 | 6.4 | Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php. | 2022-06-15 18:49:00 | 2022-06-09 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: