6 matches found
CVE-2026-32401
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.9...
CVE-2025-32401
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet...
CVE-2022-32401
creationtimestamp| type| source ---|---|--- 2022-06-24 07:30:38+00:00| seen| https://t.me/cibsecurity/45054...
CVE-2022-32401
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageprivilege.php:4...
CVE-2022-32401
Affected software: Prison Management System v1.0. Vulnerability type: SQL injection in the /pms/admin/inmates/manage_privilege.php endpoint via the id parameter. Root cause: lack of proper input filtering/escaping leading to injection. Impact (as stated): not explicitly quantified in the connecte...
WordPress cforms2 plugin cross-site scripting vulnerability (CNVD-2019-32401)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cforms2 is a form builder plugin used in it. A cross-site scripting vulnerability exists in the WordPress cforms2 plugin. An...