5 matches found
PT-2025-40452
Name of the Vulnerable Software and Affected Versions MyClub version 0.5 Description A SQL injection issue exists in MyClub version 0.5. Insufficient input sanitisation in the /articles API endpoint allows an unauthenticated remote attacker to inject arbitrary SQL commands via a crafted GET...
CVE-2024-57423
creationtimestamp| type| source ---|---|--- 2025-02-27 00:19:24+00:00| seen| https://t.me/cvedetector/18964...
CVE-2024-57423
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...
CVE-2024-57423
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...
Navigate CMS sql injection vulnerability (CNVD-2021-57423)
Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the block-order parameter of the block function in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backend databa...