Lucene search
+L

15674 matches found

OSV
OSV
added 2025/06/01 4:15 p.m.10 views

CVE-2025-5403

A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of the file /admin/viewallposts.php of the component GET Parameter Handler. The manipulation of the argument postid leads to sql injection. ...

8.8CVSS5.6AI score0.00474EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/01 4:00 p.m.72 views

CVE-2025-5403

CVE-2025-5403 affects chaitak-gorai Blogbook. Vulnerability exists in the GET Parameter Handler, specifically the post_id argument in /admin/view_all_posts.php, where manipulation leads to SQL injection. Exploitation can be remote; public exploit has been disclosed. Affected releases are unknown ...

8.8CVSS7.3AI score0.00474EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/06/01 4:00 p.m.33 views

CVE-2025-5403 chaitak-gorai Blogbook GET Parameter view_all_posts.php sql injection

A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of the file /admin/viewallposts.php of the component GET Parameter Handler. The manipulation of the argument postid leads to sql injection. ...

6.5CVSS0.00474EPSS
SaveExploits1References4
NVD
NVD
added 2025/06/01 2:15 p.m.49 views

CVE-2025-5402

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/includes/editpost.php of the component GET Parameter Handler. The manipulation of the argument...

9.8CVSS0.00581EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/01 2:00 p.m.66 views

CVE-2025-5402

CVE-2025-5402 affects chaitak-gorai Blogbook. The vulnerable component is the GET Parameter Handler in the file /admin/includes/edit_post.php, where manipulating the edit_post_id parameter leads to SQL injection. Exploitation is described as possible remotely and publicly disclosed. Several sourc...

9.8CVSS7.4AI score0.00581EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/01 2:00 p.m.13 views

CVE-2025-5402 chaitak-gorai Blogbook GET Parameter edit_post.php sql injection

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/includes/editpost.php of the component GET Parameter Handler. The manipulation of the argument...

7.5CVSS7.4AI score0.00581EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/06/01 1:00 p.m.11 views

CVE-2025-5401 chaitak-gorai Blogbook GET Parameter post.php sql injection

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Parameter Handler. The manipulation of the argument pid leads...

7.5CVSS7.5AI score0.00581EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/06/01 1:00 p.m.32 views

CVE-2025-5401 chaitak-gorai Blogbook GET Parameter post.php sql injection

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Parameter Handler. The manipulation of the argument pid leads...

7.5CVSS0.00581EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/01 1:00 p.m.67 views

CVE-2025-5401

CVE-2025-5401 affects chaitak-gorai Blogbook (up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513). The vulnerability lies in the GET Parameter Handler for /post.php, where manipulating the p_id parameter enables SQL injection. Exploitation is possible remotely and has been publicly disclosed. No fixe...

9.8CVSS7.4AI score0.00581EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/06/01 9:15 a.m.18 views

CVE-2025-5400

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. It is...

9.8CVSS0.00574EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/01 8:31 a.m.70 views

CVE-2025-5400

CVE-2025-5400 affects the Blogbook product by Chaitak-Gorai, in the file /user.php (GET Parameter Handler). The vulnerability arises from unsafely handling the parameter u_id , enabling remote SQL injection. It is described as critical with potential high impact on confidentiality, integrity, and...

9.8CVSS7.4AI score0.00574EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/01 8:31 a.m.9 views

CVE-2025-5400 chaitak-gorai Blogbook GET Parameter user.php sql injection

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. It is...

7.5CVSS7.4AI score0.00574EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/06/01 12:00 a.m.21 views

PT-2025-23430 · Unknown · Chaitak-Gorai Blogbook

Name of the Vulnerable Software and Affected Versions: chaitak-gorai Blogbook affected versions not specified Description: A critical vulnerability has been found in chaitak-gorai Blogbook. The issue affects the GET Parameter Handler component, specifically the post id argument in the /admin/view...

6.5CVSS6.7AI score0.00474EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/06/01 12:00 a.m.15 views

PT-2025-23429 · Unknown · Chaitak-Gorai Blogbook

Name of the Vulnerable Software and Affected Versions: chaitak-gorai Blogbook versions up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 Description: A critical issue affects some unknown functionality of the file /admin/includes/edit post.php of the component GET Parameter Handler. The manipulation...

7.5CVSS7.4AI score0.00581EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/06/01 12:00 a.m.20 views

PT-2025-23427 · Unknown · Chaitak-Gorai Blogbook

Name of the Vulnerable Software and Affected Versions: Chaitak-gorai Blogbook versions up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 Description: A critical vulnerability was found in Chaitak-gorai Blogbook, affecting an unknown functionality of the file /post.php of the component GET Parameter...

7.5CVSS7.4AI score0.00581EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2025/05/31 12:47 p.m.20 views

CVE-2025-48046

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint...

5.3CVSS7.2AI score0.00529EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/05/30 12:00 a.m.18 views

FreeFloat FTP Server GET Command Handler Component Buffer Overflow Vulnerability

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0, which stems from the GET Command Handler component failing to properly validate the length size of the input data, no details of the vulnerability are provided at...

9.8CVSS7.4AI score0.00698EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/29 5:15 p.m.10 views

CVE-2024-51392

An issue in OpenKnowledgeMaps Headstart v7 allows a remote attacker to escalate privileges via the url parameter of the getPDF.php component...

8.8CVSS5.8AI score0.00436EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/29 1:15 p.m.29 views

CVE-2025-48046

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint...

5.3CVSS0.00529EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/29 1:15 p.m.23 views

CVE-2025-48045

An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials...

8.7CVSS0.00632EPSS
SaveExploits0References1
Rows per page
Query Builder