18 matches found
PT-2026-99728
Name of the Vulnerable Software and Affected Versions amirsanni Mini-Inventory-and-Sales-Management-System versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95 Description A security flaw in the Database Query Builder component allows remote exploitation via SQL injection. The issue occurs whe...
CVE-2025-61194
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php...
CVE-2025-61194
daicuocms version V1.3.13 is vulnerable to a SQL injection flaw located in the file library\think\db\Builder.php . This vulnerability allows for potential unauthorized database access or modification through crafted SQL queries. No information regarding a patched version or specific remediation i...
CVE-2025-61194
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php...
CVE-2025-61194
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php...
CVE-2025-61194: Improper Neutralization of Special Elements used in an SQL Command
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php...
EUVD-2021-2568
Malware in sbrugna...
CVE-2023-4975: Cross-Site Request Forgery (CSRF)
The Website Builder by SeedProd plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.15.13.1. This is due to missing or incorrect nonce validation on functionality in the builder.php file. This makes it possible for unauthenticated attackers to chan...
WordPress Plugin Website Builder by SeedProd Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress Plugin...
PT-2023-31325
Name of the Vulnerable Software and Affected Versions The Website Builder by SeedProd plugin for WordPress versions up to, and including, 6.15.13.1 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on functionality in the builder.php file...
ThinkPHP5 SQL Injection vulnerability
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...
GHSA-Q868-C4VW-QJX3 ThinkPHP5 SQL Injection vulnerability
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...
CVE-2021-44350
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...
CVE-2021-44350
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...
Sql injection
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...
CVE-2021-44350
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...
PT-2021-24084
Name of the Vulnerable Software and Affected Versions: ThinkPHP5 versions 5.0.x through 5.1.22 Description: A SQL Injection issue exists via the parseOrder function in Builder.php. Recommendations: For versions 5.0.x through 5.1.22, consider updating to a version that contains a fix for this issu...
CVE-2021-44350: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in ThinkPHP5 5.0.x =5.1.22 via the parseOrder function in Builder.php...