9372 matches found
CVE-2022-30823
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...
CVE-2022-29659
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...
CVE-2022-29659
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...
CVE-2022-29659
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...
Sql injection
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...
Sql injection
Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blogeventsedit.php?id=31...
Sql injection
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...
Exploit for CVE-2022-30190
CVE-2022-30190 This Repository Talks about the Follina MSDT fr...
Responsive Online Blog SQL Injection Vulnerability
Responsive Online Blog is a responsive online blog site. responsive Online Blog v1.0 is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of single.php. An attacker could use this vulnerability to execute illegal SQL commands t...
Wedding Management System SQL Injection Vulnerability
Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from /Wedding-Management/admin/ blogeventsedit.php?id=31 page lacks validation of external input SQL statements, which can ...
Remote code execution
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs,...
CVE-2022-29659
CVE-2022-29659 concerns a SQL injection in Responsive Online Blog v1.0 exploitable via the id parameter in single.php . The issue arises from unsanitized input being incorporated into SQL queries, enabling an attacker to manipulate the database and potentially access or alter data. The vulnerabil...
CVE-2022-29659
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...
CVE-2022-29659: Improper Neutralization of Special Elements used in an SQL Command
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...
PT-2022-19761
Name of the Vulnerable Software and Affected Versions Responsive Online Blog version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "single.php" endpoint. Recommendations For Responsive Online Blog version 1.0...
CVE-2022-30823
CVE-2022-30823 affects Wedding Management System v1.0 and is caused by SQL Injection via the admin\blog_events_edit.php entry point. The vulnerability is documented across multiple feeds (NVD, CNVD, RH, etc.) with CVSS v3.1 base score 7.2 (HIGH) and CVSS v2.0 base score 6.5 (MEDIUM); impact inclu...
CVE-2022-30823
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...
Malware in mb-blog
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in mb-blog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 658aa7eb483cfd352b2c2c628d938ac8566bbf7cbb32d0e806867d1abcc8ae24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-20332
Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL injection via the "/Wedding-Management/admin/blog events edit.php" API endpoint, specifically through the id variable. Recommendations For Wedding Management System...