CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

169 matches found

CNVD•added 2018/05/14 12:00 a.m.•13 views

Yxcms Cross-Site Request Forgery Vulnerability

Yxcms is an efficient, flexible, practical and free enterprise building system, based on PHP and mysql technology. YXcms 1.4.7 in the protected/apps/admin/controller/adminController.php cross-site request forgery vulnerability. A remote attacker can exploit this vulnerability by deleting the...

6.5CVSS6.8AI score0.00693EPSS

SaveExploits1References1

Cvelist•added 2015/06/18 10:00 a.m.•31 views

CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

8AI score0.01551EPSS

SaveExploits0References5

exploitpack•added 2014/03/26 12:00 a.m.•24 views

OpenCart 1.5.6.1 - openbay Multiple SQL Injections

OpenCart 1.5.6.1 - openbay Multiple SQL Injections Exploit Title : OpenCart log'getEbayItemId - Product ID: '.$productid; $qry = $this-db-query"SELECT ebayitemid FROM " . DBPREFIX . "ebaylisting WHERE productid = '".$productid."' AND status = '1' LIMIT 1"; .............. Function is called on man...

SaveExploits0

Packet Storm•added 2012/05/27 12:00 a.m.•65 views

Santilga CMS 1.2.6.3 Cross Site Request Forgery / SQL Injection

============================= Vulnerable software: Santilga CMS version 1.2.6.3 $ head -n 10 Admin.php|less view-templateName = "admin"; parent::construct; $this-lang = SantilgaLanguage::getInstance-getLanguage; $this-view-lang = $this-lang; $this-view-showUploadForm = false; public function...

0.5AI score

SaveExploits0