Aggregator

CVE-2024-12794 | Codezips E-Commerce Site 1.0 /admin/editorder.php dstatus/quantity/ddate sql injection

VulDB Recent Entries
4 months 3 weeks ago
A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. This vulnerability is uniquely identified as CVE-2024-12794. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2024-12793 | PbootCMS up to 5.2.3 IndexController.php tag path traversal

VulDB Recent Entries
4 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. This vulnerability is handled as CVE-2024-12793. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Dutch DPA Fines Netflix €4.75 Million for GDPR Violations Over Data Transparency

The Hackers News
4 months 3 weeks ago
The Dutch Data Protection Authority (DPA) on Wednesday fined video on-demand streaming service Netflix €4.75 million ($4.93 million) for not giving consumers enough information about how it used their data between 2018 and 2020. An investigation launched by the DPA in 2019 found that the tech giant did not inform customers clearly enough in its privacy statement about what it does with the data
The Hacker News

Managed ad