Lucene search
+L

10203 matches found

CNNVD
CNNVD
added 2025/04/01 12:0 a.m.5 views

WordPress plugin Shopper SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.1AI score0.00464EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.9 views

WordPress plugin Next-Cart Store to WooCommerce Migration SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.3CVSS9.1AI score0.00481EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.8 views

WordPress plugin Flickr set slideshows SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Flickr set...

8.5CVSS8.9AI score0.00335EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/31 10:15 p.m.12 views

CVE-2025-3018

A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS5.7AI score0.00414EPSS
SaveExploits1References5
OSV
OSV
added 2025/03/31 9:15 a.m.7 views

CVE-2025-2985

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

8.8CVSS6.5AI score0.00462EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.6 views

WordPress plugin Uptime Robot Plugin for WordPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS8.7AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.11 views

Epicor HCM 安全漏洞

Epicor HCM is a human capital management system from Epicor, Inc. A security vulnerability exists in Epicor HCM version 2021 1.9, which stems from an incorrect manipulation of the parameter filter can lead to SQL injection issues...

9.8CVSS7.5AI score0.01679EPSS
SaveExploits1References4
CNVD
CNVD
added 2025/03/28 12:0 a.m.6 views

Bank Locker Management System changeimage1.php File SQL Injection Vulnerability

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editid of the changeimage1.php file. An attacker can exploit...

9.8CVSS8.2AI score0.00481EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.8 views

Streamsoft Prestiz SQL注入漏洞

Streamsoft Prestiz is an ERP system for the plastics industry from Streamsoft. Streamsoft Prestiz suffers from a SQL injection vulnerability that stems from multiple field inputs that are not properly cleaned, which could lead to a SQL injection attack...

8.6CVSS7.6AI score0.00408EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/27 9:51 p.m.7 views

CVE-2025-26898 WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through 3.2.1...

9.3CVSS8.9AI score0.00323EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/27 11:15 a.m.4 views

CVE-2025-30879

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through = 1.8.9...

7.6CVSS7.3AI score0.00548EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/03/27 10:58 a.m.7 views

WordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Lead Form Data Collection to CRM versions = 3.0.1...

8.5CVSS8AI score0.00422EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/03/27 2:53 a.m.8 views

WordPress WP Google Review Slider plugin <= 16.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by astra.r3verii in WordPress Plugin WP Google Review Slider versions = 16.0...

8.2CVSS8AI score0.00212EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.9 views

SEMCMS SQL注入漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites that support multiple languages. SEMCMS 5.0 and previous versions exist SQL injection vulnerability, the vulnerability stems from SEMCMSFuction.php exist SQL injection...

9.8CVSS8AI score0.00475EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/03/27 12:0 a.m.3 views

Art Gallery Management System view-enquiry-detail.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the viewid parameter of /admin/view-enquiry-detail.php against an externally entered SQL statement. An attacke...

9.8CVSS8.3AI score0.00463EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.14 views

SourceCodester Online Eyewear Shop 注入漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...

9.8CVSS8AI score0.00584EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.10 views

Code-Projects Payroll Management System 注入漏洞

Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0 due to a lack of validation of externally entered SQL statements in the parameter emptype. An attacker can exploit this vulnerability to execute illegal SQL...

8.8CVSS8.2AI score0.00487EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/03/27 12:0 a.m.4 views

Art Gallery Management System contactus.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pagetitle of /admin/contactus.php. An attacker can exploit...

9.8CVSS8.3AI score0.0046EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/03/27 12:0 a.m.6 views

Art Gallery Management System edit-artist-detail.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Name of /admin/edit-artist-detail.php?editid=1. An attacker...

9.8CVSS8.1AI score0.00481EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.8 views

tushuguanlixitong 安全漏洞

tushuguanlixitong book management system is a book management system by the individual developer of China Mingyuefusu 明月复苏. A security vulnerability exists in tushuguanlixitong, which stems from an incorrect manipulation of the parameter condition that can lead to SQL injection...

9.8CVSS6.8AI score0.0041EPSS
SaveExploits1References4
Rows per page
Query Builder