Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 22 hours ago9 views

PT-2026-47178

A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf dump systable.php of the component HTTP GET Request Handler. Such manipulation of the argument gblOrgID leads to sql injection. The attack may be launched remotely. The exploit is publicly...

7.5CVSS7AI score
Exploits0References6
EUVD
EUVD
added 2026/03/25 12:31 a.m.2 views

EUVD-2026-15029

A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0. This issue affects some unknown processing of the file updatecustomerdetails.php of the component HTTP GET Parameter Handler. Such manipulation of the argument sid leads to sql injection. The attack can b...

6.5CVSS5.7AI score0.00013EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/10/05 12:0 a.m.2 views

PT-2025-40807

Name of the Vulnerable Software and Affected Versions ixmaps website2017 versions prior to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 Description A security flaw exists that allows for cross site scripting. The issue is related to the manipulation of the trid argument within an HTTP GET request...

5.3CVSS3.5AI score0.00033EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-31757

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.00144EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/07 12:0 a.m.3 views

SiberianCMS 代码注入漏洞

SiberianCMS is an open source and free application manufacturing software from SiberianCMS Inc. A code injection vulnerability exists in SiberianCMS version 4.20.6, which originates in the file /app/sae/design/desktop/flat of the component HTTP GET request handler can lead to a cross-site scripti...

6.1CVSS5AI score0.0013EPSS
Exploits0References4
NVD
NVD
added 2024/11/06 3:15 p.m.12 views

CVE-2024-10916

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiat...

6.9CVSS0.01061EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.3 views

PT-2024-15535 · Deshang · Deshang Dsshop

Name of the Vulnerable Software and Affected Versions: DeShang DSShop versions up to 3.1.0 Description: A vulnerability was found in the HTTP GET Request Handler component, specifically affecting the file public/install.php. This issue leads to improper access controls and can be initiated...

9.8CVSS5.5AI score0.00278EPSS
Exploits0References8
NVD
NVD
added 2023/10/14 11:15 a.m.5 views

CVE-2023-5578

A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the inp...

5.4CVSS4.2AI score0.00059EPSS
Exploits0References2
Rows per page
Query Builder