Lucene search
+L

26 matches found

Cvelist
Cvelist
added 2023/05/04 12:00 a.m.36 views

CVE-2023-30203

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...

10AI score0.00752EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/23 12:15 p.m.11 views

CVE-2021-24552

The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the eventid POST parameter before using it in a SQL statement when deleting events, leading to an authenticated SQL injection issue...

7.2CVSS5.9AI score0.01578EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/03/18 3:15 p.m.6 views

CVE-2021-26935

In WoWonder 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the eventid parameter...

7.5CVSS7.9AI score0.02318EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2019/02/04 7:00 p.m.59 views

CVE-2019-7332

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' aka Event ID parameter value in the view download download.php because proper filtration is omitted...

6.1CVSS2.1AI score0.009EPSS
SaveExploits1
OSV
OSV
added 2018/01/12 5:29 p.m.8 views

CVE-2018-5315

The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the eventid parameter to event.php...

9.8CVSS5.8AI score0.0487EPSS
SaveExploits5References2
NVD
NVD
added 2006/06/16 10:02 a.m.20 views

CVE-2006-3052

Cross-site scripting XSS vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the 1 eventid parameter to view-event-details.php or 2 selectevents parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details...

6.8CVSS5.6AI score0.01842EPSS
SaveExploits1References4
Rows per page
Query Builder