Lucene search
+L

3454 matches found

attackerkb
attackerkb
•added 2025/03/04 3:15 p.m.•27 views

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS5.8AI score0.00312EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/04 3:15 p.m.•11 views

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS0.00312EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/04 2:16 p.m.•62 views

CVE-2024-9149

CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...

8.6CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/04 2:16 p.m.•29 views

CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS0.00312EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/04 2:16 p.m.•8 views

CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•2 views

CVE-2024-9149: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•6 views

PT-2025-9672

Name of the Vulnerable Software and Affected Versions Wind Media E-Commerce Website Template versions prior to 1.5 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

8.6CVSS0.00312EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/03/04 12:00 a.m.•15 views

Wind Media E-Commerce Website Template SQL注入漏洞

Wind Media E-Commerce Website Template is an e-commerce template from Wind Media, Inc. A SQL injection vulnerability exists in Wind Media E-Commerce Website Template versions prior to v1.5, which stems from susceptibility to SQL injection attacks...

8.6CVSS7.9AI score0.00312EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•17 views

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions that stems from improper authorization...

8.8CVSS6.5AI score0.00526EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•13 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

8.8CVSS7.5AI score0.00543EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•16 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

9.8CVSS7.5AI score0.00569EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•11 views

Mini-Tmall 跨站脚本漏洞

Mini-Tmall is Mini-Tmall open source Spring Boot based on a comprehensive B2C e-commerce platform . Used to build an e-commerce platform to provide commodity trading services. A cross-site scripting vulnerability exists in Mini-Tmall 20250211 and previous versions. Attackers can use the...

5.4CVSS4AI score0.00375EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•17 views

zz 代码问题漏洞

zz is an e-commerce platform for zj1983 individual developers. A code issue vulnerability exists in zz 2024-8 and prior versions, which stems from unrestricted file uploads and could lead to remote code execution...

9.8CVSS7.1AI score0.00664EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•18 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

9.8CVSS7.5AI score0.00569EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•16 views

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-08 and earlier versions, which stems from the presence of cross-site request forgery that could lead to remote code execution...

6.5CVSS5.7AI score0.00356EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•17 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-08 and prior versions, which stems from SQL injection and could lead to remote code execution...

8.8CVSS7.5AI score0.0062EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/02/26 2:22 p.m.•21 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00284EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/02/24 2:15 p.m.•9 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00284EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/24 2:15 p.m.•24 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/24 1:43 p.m.•11 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00284EPSS
SaveExploits0References2
Rows per page
Query Builder