Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/12 2:29 p.m.•16 views

CVE-2023-5204

CVE-2023-5204 AI ChatBot = 5.0.12 AND time-based blind query SLEEP Payload: action=wpbosearchresponse&name=test&keyword=test&strid=1 AND SELECT 1436 FROM SELECTSLEEP5kZil Type: UNION query Title: Generic UNION que...

9.8CVSS7.9AI score0.06832EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•2 views

CVE-2023-5204: Improper Neutralization of Special Elements used in an SQL Command

The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...

9.8CVSS7.7AI score0.06832EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
•added 2023/10/18 12:00 a.m.•13 views

PT-2023-31909

Name of the Vulnerable Software and Affected Versions ChatBot plugin for WordPress versions up to, and including, 4.8.9 Description The issue is related to SQL Injection via the strid parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the...

9.8CVSS8.4AI score0.06832EPSS
SaveExploits4References11
Prion
Prion
•added 2007/03/02 9:18 p.m.•27 views

Sql injection

Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the 1 strid parameter to index.php and the 2 id0 or other id array index parameter to filecheck.php...

6.8CVSS9.3AI score0.01082EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2007/03/02 9:18 p.m.•3 views

CVE-2007-1135

Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the 1 strid parameter to index.php and the 2 id0 or other id array index parameter to filecheck.php...

6.8CVSS6.3AI score0.01082EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/27 12:00 a.m.•8 views

CVE-2007-1135: Undefined Security Weakness

Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the 1 strid parameter to index.php and the 2 id0 or other id array index parameter to filecheck.php...

6.8CVSS6.4AI score0.01082EPSS
SaveExploits0References1
Rows per page
Query Builder