Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

class class vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-5856
Directory traversal vulnerability in scripts/export.php in ClaSS prior to 0.8.61 allows remote malicious users to read arbitrary files via directory traversal sequences in the ftype parameter.
Class ClassClass Class 0.8.59Class Class 0.8.20Class Class 0.8.14Class Class 0.6.1Class Class 0.6.0Class Class 0.4Class Class 0.8.32Class Class 0.8.29Class Class 0.8.26Class Class 0.8Class Class 0.8.0Class Class 0.4.1Class Class 0.4.0Class Class 0.8.47Class Class 0.8.40Class Class 0.8.5Class Class 0.5.0Class Class 0.4.2Class Class 0.8.56Class Class 0.8.51Class Class 0.8.10
NA
CVE-2005-2322
Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote malicious users to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php.
Class-1 Class-1 Forum 0.23.2Class-1 Class-1 Forum 0.24.4Clever Copy Clever Copy
NA
CVE-2005-2323
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote malicious users to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum p...
Clever Copy Clever CopyClass-1 Class-1 Forum 0.24.4Class-1 Class-1 Forum 0.23.2
5.3
CVSSv3
CVE-2020-7637
class-transformer prior to 0.3.1 allow malicious users to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Class-transformer Project Class-transformer
6.1
CVSSv3
CVE-2019-6029
Cross-site scripting vulnerability in Custom Body Class 0.6.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Custom Body Class Project Custom Body Class
8.8
CVSSv3
CVE-2019-6030
Cross-site request forgery (CSRF) vulnerability in Custom Body Class 0.6.0 and previous versions allows remote malicious users to hijack the authentication of administrators via unspecified vectors.
Custom Body Class Project Custom Body Class
NA
CVE-2005-1067
Vulnerability in Access_user Class prior to 1.75 allows local users to gain access as other users via the password "new".
Access User Class Access User Class 1.6
9.8
CVSSv3
CVE-2017-17630
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
Yoga Class Script Project Yoga Class Script 1.0
9.8
CVSSv3
CVE-2019-18413
In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this ...
Typestack Class-validator Project Typestack Class-validator 0.10.2
6.1
CVSSv3
CVE-2023-2814
A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/save_teacher.php of the component POST Parameter Handler. The manipulation of the argument Academic_Rank leads to cross site ...
Class Scheduling System Project Class Scheduling System 1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook