All CVEs — page 317 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows embedding of attacker-controlled URLs, which could lead to execution of untrusted scripts in Ghost content, compromising admin sessions.
This vulnerability allows for Blind SQL Injection in WP BASE Booking, enabling attackers to extract data from the database without direct confirmation of each query result.
A deserialization vulnerability allows object injection, leading to potential remote code execution or data loss.
This vulnerability allows attackers with minimal privileges to bypass authorization controls and access restricted functionality within the Scratch & Win plugin, potentially leading to unauthorized data manipulation and content exposure.
This vulnerability allows for Object Injection through deserialization of untrusted data, leading to potential remote code execution.
FineAdmin v1.0 is vulnerable to SQL injection via the field/order parameter, allowing attackers to access sensitive database information.