351 matches found
EUVD-2021-11255
Malware in sbrugna...
EUVD-2008-1936
Malware in sbrugna...
EUVD-2023-41084
Malicious code in bioql PyPI...
CVE-2025-6484: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...
Code-Projects Online Shopping Store 安全漏洞
Code-Projects Online Shopping Store is a Code-Projects open source online store. A security vulnerability exists in Code-Projects Online Shopping Store version 1.0, which originates from SQL injection due to incorrect manipulation of the parameters catid/brandid/keyword/proId/pid in file/action.p...
CVE-2023-37164
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop=search...
CVE-2020-23945
A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...
CVE-2025-3968: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...
VulnCheck KEV: CVE-2021-41649
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...
CVE-2023-37164
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
CVE-2023-37164
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
Cross site scripting
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
CVE-2023-37164: Improper Neutralization of Input During Web Page Generation
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
CVE-2023-37164
CVE-2023-37164 describes a reflected cross-site scripting vulnerability in Diafan CMS v6.0. The issue arises from insufficient filtering/escaping of user-supplied data in the cat_id parameter of the endpoint "/shop/?module=shop&action=search". This permits an attacker to inject arbitrary web scri...
CVE-2023-3528
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument catid leads to sql injection. The attack may be launched remotely. The identifier of this...
CVE-2023-3528: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument catid leads to sql injection. The attack may be launched remotely. The identifier of this...
CVE-2021-41649
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...
CVE-2021-41649: Improper Neutralization of Special Elements used in an SQL Command
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...
PuneethReddyHc Online Shopping System Advanced SQL注入漏洞
PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. PuneethReddyHc Online Shopping System Advanced suffers from a SQL injection vulnerability that originates in the /homeaction.php catid parameter...
