Exploit - CVE CyberSecurity Database News (Page 478)

May 23, 2024 API Exploit SQL Java PHP

CVE-2024-35091 - Exploiting SQL Injection in J2EEFAST v2.7. via the `findPage` Function

In June 2024, a serious SQL injection vulnerability dubbed CVE-2024-35091 was disclosed for the open-source enterprise rapid development framework J2EEFAST version 2.7.. This bug

May 23, 2024 XSS WordPress Exploit mdempfle advanced iframe

CVE-2024-4365 - How a WordPress Plugin Opened Doors with a Stored XSS Vulnerability

The Advanced iFrame plugin is a popular tool for WordPress sites. It lets site owners embed content from other pages in an easy, customizable iFrame.

May 23, 2024 Exploit SQL PHP

CVE-2024-34932 - How a Simple SQL Injection Can Hack Your School Management System

On June 2024, CVE-2024-34932 was publicly disclosed, uncovering a critical SQL injection flaw in a popular educational product: Campcodes Complete Web-Based School Management System v1.

May 23, 2024 Windows Exploit

CVE-2024-35081 - How LuckyFrameWeb v3.5.2 Lets Attackers Delete Any File

CVE-2024-35081 is a vulnerability that affects LuckyFrameWeb v3.5.2. This bug allows an attacker to delete any file on the server, just by changing

May 23, 2024 Exploit SQL PHP

CVE-2024-34934 - SQL Injection in Campcodes Complete Web-Based School Management System 1. ([emark_range_grade_update_form.php]) – Exploit Details & Analysis

Published: 2024 Affects: Campcodes Complete Web-Based School Management System 1. Vulnerability Type: SQL Injection File: /view/emarks_range_grade_update_form.php Vulnerable Parameter: conversation_