CVE-2022-50956

WordPress Plugin amministrazione-aperta 3.7.3 Local File Read

WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in the open parameter. Attackers can supply file paths through the open GET parameter in dispatcher.php to include and read sensitive files accessible to the web server.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Amministrazione Aperta Project Wordpress

Products

Amministrazione Aperta Wordpress

CVE-2022-50944

Aero CMS 0.0.1 PHP Code Injection via posts.php

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endpoint with source=add_post parameter, and the uploaded files are executed by the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Aerocms Project Megatkc

Products

Aerocms Aero Cms

CVE-2022-50943

Moodle LMS 4.0 Cross-Site Scripting via course search.php

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Moodle

Products

Moodle

CVE-2021-47979

WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion

WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJAX requests. Attackers can send POST requests to admin-ajax.php with crafted file_name and folder_name parameters to delete arbitrary files from the WordPress installation directory.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Miniorange Wordpress Wpbackitup

Products

Backup And Restore Wordpress Backup And Restore Wordpress

CVE-2021-47950

Advanced Guestbook 2.4.4 Persistent XSS via Smilies

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the s_emotion parameter. Attackers can submit POST requests to admin.php with JavaScript code in the s_emotion field, which executes when administrators view the smilies tab.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Ampps Simplephpscripts

Products

Advanced Guestbook Guestbook Script

CVE-2021-47941

WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Modalsurvey Wordpress

Products

Survey & Poll Wordpress Survey And Poll Wordpress

CVE-2021-47932

WordPress TheCartPress 1.5.3.6 Privilege Escalation Unauthenticated

WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitting crafted requests to the AJAX handler. Attackers can send POST requests to the tcp_register_and_login_ajax action with tcp_role set to administrator to gain full administrative access without authentication.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Thecartpress Wordpress

Products

Thecartpress Wordpress

CVE-2021-47925

CMDBuild 3.3.2 Multiple Stored Cross-Site Scripting

CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted input in card creation and file upload endpoints. Attackers can inject XSS payloads through Employee card parameters or SVG file attachments in the classes endpoint, which execute when other users view the affected records or preview attachments.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Cmdbuild Tecnoteca

Products

Cmdbuild Cmdbuild

CVE-2021-47903

LiteSpeed Web Server Enterprise 5.4.11 - Command Injection

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path traversal and bash command injection.

CVSS 4.0 · 8.6 High EPSS 1.6% KEV · Not listed

Vendors

Litespeed Technologies Litespeedtech

Products

Litespeed Web Server Litespeed Web Server

CVE-2021-47889

Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path

Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Softros Systems\Softros Messenger\Spell Checker\' to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Cd-messenger Project Softros Systems

Products

Cd-messenger Lan Messenger

CVE-2021-47815

Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Nsasoft Nsauditor

Products

Nsauditor Nsauditor

CVE-2021-47778

GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection

GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server.

CVSS 4.0 · 8.6 High EPSS 1.3% KEV · Not listed

Vendors

Get-simple Netexplorer

Products

Getsimplecms My Smtp Contact

CVE-2021-47736

CMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing

CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitrary command execution on the server.

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed

Vendors

Cmsimple-xh

Products

Cmsimple Xh

CVE-2021-47708

COMMAX Smart Home IoT Control System SQL Injection Authentication Bypass

COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameter in 'loginstart.asp'. Attackers can exploit this by sending a POST request with malicious 'id' values to manipulate database queries and gain unauthorized access.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Bosch Commax

Products

Smart Home Smart Home System

CVE-2021-4474

Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access

Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit this vulnerability to access sensitive information including configuration files, credentials, and system data stored on the device.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ruckus Ruckussecurity Ruckuswireless

Products

Ruckus Unleashed Smartzone 100-d (sz100-d) (eol) Smartzone 100 (sz-100) (eol) and 6 more

CVE-2020-37255

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Wordpress Wptimecapsule

Products

Wordpress Wp Time Capsule

CVE-2020-37254

Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Wondershare

Products

Pdfelement

CVE-2020-37236

NewsLister Authenticated Persistent Cross-Site Scripting via Admin Panel

NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news addition interface. Attackers can inject JavaScript payloads via the title field in the admin panel that execute when news items are viewed by other users.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Netartmedia

Products

News Lister

CVE-2020-37226

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information using automated tools.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Joomsky

Products

J2 Jobs Js Jobs

CVE-2020-37224

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Joomsky

Products

J2 Jobs Js Jobs