Lucene search
+L

7 matches found

CVE
CVE
•added 2025/03/24 1:47 p.m.•96 views

CVE-2025-30604

CVE-2025-30604 affects JiangQie Official Website Mini Program (ZhuiGe Official Website Mini Program in EUVD context). Reported as an SQL Injection vulnerability (blind SQLi) in the Mini Program component, with affected versions ranging up to 1.8.2. The connected EUVD entry confirms the issue is p...

7.6CVSS7.3AI score0.00445EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:03 p.m.•20 views

WordPress JiangQie Official Website Mini Program plugin <= 1.8.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by kuteminh11 - VNPT Cyber Immunity in WordPress Plugin JiangQie Official Website Mini Program versions = 1.8.2...

7.6CVSS8AI score0.00445EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•2 views

CVE-2025-30604: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jiangqie JiangQie Official Website Mini Program jiangqie-official-website-mini-program allows Blind SQL Injection.This issue affects JiangQie Official Website Mini Program: from n/a through = 1.8.2...

7.6CVSS5.8AI score0.00445EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•16 views

WordPress plugin JiangQie Official Website Mini Program SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

7.6CVSS8.9AI score0.00445EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/06 11:15 a.m.•25 views

Sql injection

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues...

6.5CVSS9AI score0.01608EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/06 12:00 a.m.•5 views

CVE-2021-24303: Improper Neutralization of Special Elements used in an SQL Command

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues...

8.8CVSS5.9AI score0.01608EPSS
SaveExploits2References3
wpexploit
wpexploit
•added 2021/07/30 12:00 a.m.•700 views

JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

The plugin does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues https://example.com/wp-admin/admin.php?page=jiangqieowfreefeedback&action=detail&id=1+AND+%28SELECT+%2A+FROM+%28SELECT%28SLEEP%285%29%29%29a%29 Could also make a logged i...

8.8CVSS1.1AI score0.01608EPSS
SaveExploits2References1
Rows per page
Query Builder