Lucene search
+L

15 matches found

Cvelist
Cvelist
•added 2025/10/27 9:02 p.m.•31 views

CVE-2025-12327 shawon100 RUET OJ description.php sql injection

A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the file /description.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been public...

6.5CVSS0.0027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2025-12327: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the file /description.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been public...

6.5CVSS5.4AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•14 views

PT-2025-44046

Name of the Vulnerable Software and Affected Versions shawon100 RUET OJ versions up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5 Description A flaw exists in shawon100 RUET OJ that allows for SQL injection through manipulation of the ID argument when processing the /description.php file. This issu...

6.5CVSS6.3AI score0.0027EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-6207

Malware in sbrugna...

7.5CVSS6.4AI score0.00999EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/27 10:00 p.m.•65 views

CVE-2024-3002

CVE-2024-3002 affects code-projects Online Book System 1.0. The vulnerability is in /description.php where the ID parameter is not validated, allowing remote SQL injection. Exploitation is possible remotely, and multiple sources note public disclosure. Documented impact is data theft/alteration r...

9.8CVSS6.8AI score0.00822EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•1 views

CVE-2024-3002: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Book System 1.0. Affected is an unknown function of the file /description.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00822EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

BoutikOne (description.php) SQL Injection Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/03/06 12:00 a.m.•30 views

BoutikOne SQL Injection

| || \ / \ / \ | | / \ / \ | | | | / \ | \ ||| | \ \ / / \ \ / \ || / / \ \ / / | ||| || / / \ \ | | \ \ | | | |/ / / / \ \ | | | | / / \ \ / / | | | | | | / / \ \ | |/ / | | |/ / / | | \ \ | | | | | |/ / | | \ \ / / | | | | / / | | \ \ |/ | | | | \ \ | | || | || || | | || | || | | | | | | || | |...

0.1AI score
SaveExploits0
CVE
CVE
•added 2009/02/23 3:00 p.m.•58 views

CVE-2008-6237

CVE-2008-6237 is an SQL injection in Scripts For Sites EZ Hotscripts/ SFS-like site via software-description.php (parameter id). Root cause: insufficient input sanitization before SQL usage. Impact per provided sources: remote attacker can execute arbitrary SQL commands; data compromise or modifi...

7.5CVSS8.7AI score0.00999EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/23 12:00 a.m.•2 views

CVE-2008-6237: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00999EPSS
SaveExploits1References2
Prion
Prion
•added 2008/06/30 6:24 p.m.•28 views

Sql injection

Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to showcategory.php and the 2 id parameter to software-description.php...

6.8CVSS9.3AI score0.01117EPSS
SaveExploits2References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/30 12:00 a.m.•2 views

CVE-2008-2916: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to showcategory.php and the 2 id parameter to software-description.php...

6.8CVSS6.4AI score0.01117EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/22 12:00 a.m.•3 views

CVE-2007-6084: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References2
CVE
CVE
•added 2007/11/22 12:00 a.m.•60 views

CVE-2007-6084

CVE-2007-6084 describes an SQL injection vulnerability in the HotScripts Clone Script, specifically in the file software-description.php. The issue allows remote attackers to inject arbitrary SQL via the id parameter, leading to potential data exposure or modification. The connected documents con...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/24 12:00 a.m.•3 views

CVE-2006-5473: Undefined Security Weakness

PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the libdir parameter. NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the...

7.5CVSS6.4AI score0.01932EPSS
SaveExploits0References1
Rows per page
Query Builder