496 matches found
CVE-2023-36213: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36210
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
CVE-2023-36210
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
CVE-2023-36210
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
CVE-2023-36210: Improper Neutralization of Special Elements in Output Used by a Downstream Component
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
PT-2023-25481
Name of the Vulnerable Software and Affected Versions MotoCMS version 3.4.3 Description A Server-Side Template Injection SSTI issue was found in the Store Category Template of MotoCMS. This issue is related to the keyword parameter. Recommendations For MotoCMS version 3.4.3, consider restricting...
MotoCMS Version 3.4.3 - SQL Injection Vulnerability
Title: MotoCMS Version 3.4.3 - SQL Injection Author: tmrswrr Date: 01/06/2023 Vendor: https://www.motocms.com Link: https://www.motocms.com/website-templates/demo/189526.html Vulnerable Versions: MotoCMS 3.4.3 Description MotoCMS Version 3.4.3 SQL Injection via the keyword parameter. Steps to...
MotoCMS 3.4.3 SQL Injection
Title: MotoCMS Version 3.4.3 - SQL Injection Author: tmrswrr Date: 01/06/2023 Vendor: https://www.motocms.com Link: https://www.motocms.com/website-templates/demo/189526.html Vulnerable Versions: MotoCMS 3.4.3 Description MotoCMS Version 3.4.3 SQL Injection via the keyword parameter. Steps to...
SUL1SS shop SQL injection vulnerability
SUL1SS shop is a multi-merchant mall application from the SUL1SS individual developer. SUL1SS shop suffers from a SQL injection vulnerability that stems from a misuse of the keyword parameter resulting in sql injection...
CVE-2022-40447
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
Sql injection
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
CVE-2022-40447
CVE-2022-40447 affects ZZCMS 2022 with a SQL injection in the admin/baojia_list.php endpoint through the keyword parameter. The vulnerability is described as an SQL injection (concrete vulnerable vector: keyword parameter) and is rated with CVSS 3.1: 7.2 (HIGH) with network attack vector, low att...
CVE-2022-40447
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
CVE-2022-40447: Improper Neutralization of Special Elements used in an SQL Command
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojialist.php...
PT-2022-25390 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: The issue is related to a SQL injection vulnerability. It occurs via the keyword parameter at the "/admin/baojia list.php" API endpoint. Recommendations: For ZZCMS version 2022, avoid using the keyword paramete...
CVE-2022-35121
Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...
CVE-2022-35121
Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...
CVE-2022-35121
CVE-2022-35121 affects Novel-Plus v3.6.1 with a SQL injection via the keyword parameter on the endpoint /service/impl/BookServiceImpl.java. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and user interaction not needed; impact is H...
