CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

Circl•added 2026/01/23 7:22 a.m.•3 views

CVE-2025-14069

creationtimestamp| type| source ---|---|--- 2026-01-23 07:22:53+00:00| seen| https://gist.github.com/Darkcrai86/5c837904f7df1e548ce3cb659b0166cc 2026-01-23 07:44:26+00:00| seen| https://gist.github.com/Darkcrai86/36dd62bdbe23480b4fca7096e3c32612 2026-01-23 08:04:20+00:00| seen|...

6.4CVSS5AI score0.00017EPSS

Exploits0References3

NVD•added 2026/01/23 6:15 a.m.•4 views

CVE-2025-14069

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpcustomschemafield' profile field in all versions up to, and including, 1.54 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

6.4CVSS0.00017EPSS

Exploits0References5

OSV•added 2020/06/29 5:15 p.m.•0 views

CVE-2020-14069

An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php...

6.8CVSS6.7AI score

Exploits0References2

NVD•added 2020/06/29 5:15 p.m.•7 views

CVE-2020-14069

6.8CVSS0.00137EPSS

Exploits0References2

CVE•added 2020/06/29 4:26 p.m.•36 views

CVE-2020-14069

CVE-2020-14069 affects MK-AUTH 19.01, with SQL injection in the mkt/ PHP scripts (arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, wifi.php). Root cause is improper handling of user-supplied input leading to SQL injection. The public documents confirm the v...

6.8CVSS7.2AI score0.00137EPSS

Exploits0References2Affected Software1

CVE•added 2018/07/15 5:0 p.m.•35 views

CVE-2018-14069

SRCMS V2.3.1 contains a CSRF flaw that allows an attacker to add a user account via admin.php?m=Admin&c=member&a=add. The affected component is the user-management functionality; the root cause is a CSRF vulnerability in the request handling for adding members. Impact statements in the sources in...

8.8CVSS8.6AI score0.00127EPSS

Exploits0References1Affected Software1

NVD•added 2017/08/31 6:29 p.m.•10 views

CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

9.8CVSS9.9AI score0.0025EPSS

Exploits1References2

CVE•added 2017/08/31 6:0 p.m.•52 views

CVE-2017-14069

CVE-2017-14069 affects NexusPHP 1.5.beta5.20120707. The root cause is a SQL Injection in the usernw parameter of nowarn.php, allowing a remote attacker to execute arbitrary SQL commands. Public records in CNVD-2017-30775 corroborate the vulnerability details and impact. The connected documents do...

9.8CVSS9.7AI score0.0025EPSS

Exploits1References2Affected Software1