302 matches found
EUVD-2023-42670
Malicious code in bioql PyPI...
EUVD-2023-43308
Malicious code in bioql PyPI...
EUVD-2024-22745
Malicious code in bioql PyPI...
EUVD-2022-31700
Malicious code in bioql PyPI...
EUVD-2021-30608
Malicious code in bioql PyPI...
EUVD-2025-30909
Malicious code in bioql PyPI...
EUVD-2022-31702
Malicious code in bioql PyPI...
EUVD-2022-31699
Malicious code in bioql PyPI...
EUVD-2022-31698
Malicious code in bioql PyPI...
EUVD-2023-46095
Malicious code in bioql PyPI...
EUVD-2022-31701
Malicious code in bioql PyPI...
CVE-2025-29084
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file...
CVE-2025-29084
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file...
CVE-2025-29083
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the PluginManager.php file...
CVE-2025-29083
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the PluginManager.php file...
CVE-2025-29084
A SQL Injection vulnerability exists in CSZ-CMS v.1.3.0 , an open-source web content management system. The flaw resides in the execSqlFile function within the Upgrade.php file, where unauthenticated input is improperly neutralized. This allows a remote attacker to manipulate SQL queries to achie...
CVE-2025-29083
CSZ-CMS v.1.3.0 contains a SQL Injection vulnerability within the Plugin_Manager.php file. The root cause is the execSqlFile function, which fails to correctly filter input, allowing a remote attacker to manipulate SQL queries. This flaw can lead to arbitrary code execution . To remediate this, u...
CVE-2025-29084
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file...
CVE-2025-29083: Improper Neutralization of Special Elements used in a Command
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the PluginManager.php file...
CVE-2025-29084: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file...