Lucene search
K

4695 matches found

NVD
NVD
added 2025/02/16 11:15 p.m.14 views

CVE-2025-26755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS0.00356EPSS
Exploits0References1
CVE
CVE
added 2025/02/16 10:17 p.m.74 views

CVE-2025-26755

CVE-2025-26755 concerns the WordPress plugin WP Airbnb Review Slider. The vulnerability is an SQL Injection due to improper neutralization of input in the plugin, allowing Blind SQL Injection on versions

7.6CVSS7.3AI score0.00356EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/09 10:18 a.m.8 views

CVE-2025-25116

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sudipto Link to URL / Post link-to-url-post allows Blind SQL Injection.This issue affects Link to URL / Post: from n/a through = 1.3...

7.6CVSS7.3AI score0.0043EPSS
Exploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.65 views

CVE-2025-25116

CVE-2025-25116 affects the WordPress plugin Link to URL / Post (versions n/a through 1.3). Root cause: Improper Neutralization of Special Elements used in an SQL Command, enabling Blind SQL Injection. Impact aligns with CVSS v3.1: High overall (7.6), with confidentiality impact High and availabil...

7.6CVSS7.3AI score0.0043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:33 a.m.12 views

CVE-2025-24587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS7.4AI score0.32216EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:28 a.m.7 views

CVE-2025-22347

Cross-Site Request Forgery CSRF vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through = 3.9...

8.2CVSS7.3AI score0.00187EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:6 p.m.8 views

CVE-2022-1376

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEprivgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS7.8AI score0.01138EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:58 p.m.9 views

CVE-2022-1258

A blind SQL injection vulnerability in the ePolicy Orchestrator ePO extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server...

8.4CVSS7.8AI score0.00909EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:57 p.m.8 views

CVE-2022-1375

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEslogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS7.8AI score0.01138EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:57 p.m.7 views

CVE-2022-1366

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS7.8AI score0.19365EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:55 p.m.12 views

CVE-2022-1371

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS7.8AI score0.01138EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:48 a.m.5 views

CVE-2024-50332

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no know...

8.8CVSS7.8AI score0.00432EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:47 a.m.4 views

CVE-2024-50479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through = 1.1...

9.8CVSS5.9AI score0.00475EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:40 a.m.7 views

CVE-2024-50524

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Quý Lê 91 Administrator Z administrator-z allows Blind SQL Injection.This issue affects Administrator Z: from n/a through 2024.10.21...

8.5CVSS5.9AI score0.00384EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:4 a.m.5 views

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through = 1.0.0...

8.8CVSS5.9AI score0.00215EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:2 a.m.6 views

CVE-2024-49620

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mrcheck116 FERMA.ru.net ferma-ru-net-checkout allows Blind SQL Injection.This issue affects FERMA.ru.net: from n/a through = 1.3.3...

8.8CVSS5.9AI score0.00432EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:0 a.m.6 views

CVE-2024-49619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acespritech Social Link Groups social-link-groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through = 1.1.0...

8.8CVSS5.9AI score0.00432EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:55 a.m.5 views

CVE-2024-49615

Cross-Site Request Forgery CSRF vulnerability in Henrique Rodrigues SafetyForms safetymails-forms allows Blind SQL Injection.This issue affects SafetyForms: from n/a through = 1.0.0...

8.8CVSS5.9AI score0.00215EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:46 a.m.5 views

CVE-2024-49618

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jordan Lyall MyTweetLinks mytweetlinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through = 1.1.1...

8.8CVSS5.9AI score0.00432EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:25 a.m.8 views

CVE-2024-51625

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

8.5CVSS5.9AI score0.00384EPSS
Exploits0References1
Rows per page
Query Builder