154 matches found
SQL Injection
Overview bolt/bolt is a sophisticated, lightweight & simple CMS. Affected versions of this package are vulnerable to SQL Injection via the order parameter in content listing pages through the OrderDirective component. An attacker can extract sensitive information from the database by injecting...
CVE-2026-39229
Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information...
CVE-2026-39229
Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information...
Bolt CMS 安全漏洞
Bolt CMS is an open-source content management system based on PHP, developed by Bolt CMS. Versions of Bolt CMS 3.7.0 and earlier contain security vulnerabilities, which stem from SQL injection vulnerabilities in the order parameter of the content list page. Attackers with low privileges and...
CVE-2026-39229
Bolt CMS up to version 3.7.0 is affected by an SQL Injection in the order parameter of content listing pages, exploitable by an authenticated attacker with low privileges via the OrderDirective component. This can lead to extraction of sensitive information. The CVSS 3.1 base score is 6.5 (Medium...
CVE-2026-39229
Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information...
CVE-2026-39229
Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information...
PT-2026-44900
Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information...
EUVD-2020-0462
Malware in sbrugna...
EUVD-2020-0450
Malware in sbrugna...
EUVD-2022-2176
Malicious code in bioql PyPI...
EUVD-2024-48241
Malicious code in bioql PyPI...
EUVD-2025-19905
Malicious code in bioql PyPI...
EUVD-2024-2450
Malicious code in bioql PyPI...
EUVD-2022-3972
Malicious code in bioql PyPI...
EUVD-2022-2649
Malicious code in bioql PyPI...
EUVD-2022-1744
Malicious code in bioql PyPI...
EUVD-2022-4198
Malicious code in bioql PyPI...
The filename of uploaded files vulnerable to stored XSS in Bolt CMS
...
CSRF issue on preview pages in Bolt CMS
...