Lucene search
+L

90 matches found

NVD
NVD
•added 2025/10/27 8:15 a.m.•14 views

CVE-2025-12248

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

7.5CVSS0.00328EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/27 8:02 a.m.•17 views

EUVD-2025-36135

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

7.5CVSS6.4AI score0.00328EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/27 8:02 a.m.•6 views

CVE-2025-12248 CLTPHP search.html sql injection

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/27 8:02 a.m.•30 views

CVE-2025-12248

CVE-2025-12248 concerns CLTPHP 3.0, where an unknown function in the file /home/search.html allows manipulation of the keyword argument leading to a SQL injection . The vulnerability is exploitable remotely and has had exploits disclosed publicly, with a Proof-of-Concept in the public domain. Aff...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2025-12248: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

7.5CVSS5.5AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•16 views

CLTPHP Content Management System SQL注入漏洞

CLTPHP Content Management System is a content management system from the Chinese company CLTPHP. A SQL injection vulnerability exists in CLTPHP Content Management System version 3.0. The vulnerability stems from an incorrect manipulation of the parameter keyword in the file /home/search.html, whi...

7.5CVSS7.8AI score0.00328EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2022-24429

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00593EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-34687

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00743EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-34690

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00395EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-34691

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00841EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-34688

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.01022EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-34689

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00827EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-34692

Malicious code in bioql PyPI...

8.1CVSS8.1AI score0.00734EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•19 views

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

8.1CVSS6.8AI score0.00734EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•15 views

CVE-2023-30264

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update...

9.8CVSS6.9AI score0.00743EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•18 views

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

6.1CVSS6AI score0.00395EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•16 views

CVE-2023-30268

CLTPHP =6.0 is vulnerable to Improper Input Validation...

9.8CVSS6.9AI score0.00841EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:41 a.m.•16 views

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

6.5CVSS6.9AI score0.01022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:13 p.m.•16 views

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

6.1CVSS6.2AI score0.00593EPSS
SaveExploits0References1
NVD
NVD
•added 2023/05/04 8:15 p.m.•31 views

CVE-2023-30264

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update...

9.8CVSS9.5AI score0.00743EPSS
SaveExploits0References1
Rows per page
Query Builder