Lucene search
K

1300 matches found

OSV
OSV
added 2025/10/09 6:15 p.m.0 views

CVE-2025-60267

In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injection vulnerability...

6.5CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.5 views

PT-2025-41323

Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A security flaw exists in code-projects Online Complaint Site version 1.0. The issue involves SQL injection due to manipulation of the cid argument when processing the file...

8.8CVSS6.5AI score0.0004EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

CampCodes Online Learning Management System 安全漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter datestart in the file...

9.8CVSS7.8AI score0.00042EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Code-Projects Online Complaint Site SQL注入漏洞

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter state in the file /cms/admin/state.php for externally entered SQL statements. An attacker can exploit this vulnerability...

8.8CVSS7AI score0.0004EPSS
Exploits1References6
OSV
OSV
added 2025/10/08 12:30 p.m.1 views

GHSA-MRMX-JFW8-QHGV Melis Platform CMS SQL Injection

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

9.3CVSS8.1AI score0.00014EPSS
Exploits2References5
OSV
OSV
added 2025/10/08 2:15 a.m.0 views

CVE-2025-11422

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

9.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.1 views

code-projects E-Commerce Website SQL注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter orderid in file /pages/editorderdetails.php. An attacker can exploit this vulnerability to...

9.8CVSS7.8AI score0.00043EPSS
Exploits1References6
OSV
OSV
added 2025/10/07 1:15 p.m.0 views

CVE-2025-40886

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

8.8CVSS6AI score0.00027EPSS
Exploits0References1
OSV
OSV
added 2025/10/07 1:15 p.m.1 views

CVE-2025-40887

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...

6.5CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2025/10/07 1:15 p.m.1 views

CVE-2025-40885

A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...

6.5CVSS0.00022EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:36 p.m.2 views

EUVD-2025-32873

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

7.7CVSS7.5AI score0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 11:43 a.m.1 views

CVE-2025-0603 SQLi in Callvision Healthcare's Callvision Emergency Code

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Callvision Healthcare Callvision Emergency Code allows SQL Injection, Blind SQL Injection.This issue affects Callvision Emergency Code: before V3.0...

9.8CVSS7.5AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-6801

Malware in sbrugna...

7.5CVSS6.4AI score0.0126EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2000-0324

Malware in sbrugna...

7.2CVSS6.4AI score0.0705EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-17117

Malware in sbrugna...

9.8CVSS9.5AI score0.04131EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-0324

Malware in sbrugna...

6.4CVSS6AI score0.00512EPSS
Exploits0References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-0283

Malware in sbrugna...

7.5CVSS7.4AI score0.00381EPSS
Exploits2References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-0251

Malware in sbrugna...

6.4CVSS7.4AI score0.00159EPSS
Exploits1References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-17118

Malware in sbrugna...

9.8CVSS9.5AI score0.02382EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-28858

Malware in sbrugna...

6.5CVSS6.3AI score0.00484EPSS
Exploits0References3
Rows per page
Query Builder