Lucene search
+L

639 matches found

NVD
NVD
•added 2023/05/30 10:15 p.m.•30 views

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

9.8CVSS9.8AI score0.00752EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/05/30 10:15 p.m.•7 views

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

9.8CVSS7.4AI score0.00752EPSS
SaveExploits1References2
OSV
OSV
•added 2023/05/30 10:15 p.m.•11 views

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

9.8CVSS5.8AI score0.00752EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/05/30 12:00 a.m.•37 views

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

10AI score0.00752EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/05/30 12:00 a.m.•17 views

PT-2023-24462 · Bluecms · Bluecms

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: A SQL injection issue was found in BlueCMS via the keywords parameter at the "search.php" endpoint. Recommendations: For BlueCMS version 1.6, avoid using the keywords parameter in the "search.php" endpoint unt...

9.8CVSS8.3AI score0.00752EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/05/30 12:00 a.m.•13 views

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

8.3AI score0.00752EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/05/30 12:00 a.m.•11 views

BlueCMS SQL注入漏洞

BlueCMS is a content management system CMS based on PHP and MySQL. A security vulnerability exists in BlueCMS v1.6, which can be exploited for SQL injection via the keywords parameter in search.php...

9.8CVSS8.7AI score0.00752EPSS
SaveExploits1References2
wpexploit
wpexploit
•added 2023/05/25 12:00 a.m.•163 views

AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot 1. Go to "Settings Language Settings ChatBot Keywords" 2. Enter...

4.8CVSS8.5AI score0.00442EPSS
SaveExploits2
WPVulnDB
WPVulnDB
•added 2023/05/25 12:00 a.m.•14 views

AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot PoC 1. Go to "Settings Language Settings ChatBot Keywords" 2...

4.8CVSS8.3AI score0.00442EPSS
SaveExploits2Affected Software1
OSV
OSV
•added 2023/04/04 6:15 p.m.•23 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.2CVSS5.8AI score0.00702EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•41 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.3AI score0.00702EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/04/04 12:00 a.m.•14 views

XiaoBingby TeaCMS 授权问题漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. A security vulnerability exists in XiaoBingby TeaCMS 2.3.3, which stems from an unauthorized access issue in the system that can be exploited by an attacker to elevate privileges via the id and keywords parameters...

7.2CVSS7AI score0.00702EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/04/04 12:00 a.m.•14 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.1AI score0.00702EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/14 9:15 a.m.•36 views

CVE-2022-47141

Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/14 9:15 a.m.•11 views

CVE-2022-47141

Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/14 9:15 a.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...

6.8CVSS8.7AI score0.00253EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/03/14 8:55 a.m.•58 views

CVE-2022-47141

CVE-2022-47141 affects the Seerox WP Dynamic Keywords Injector plugin for WordPress, with CSRF in versions

8.8CVSS7.1AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/03/14 8:55 a.m.•46 views

CVE-2022-47141 WordPress WP Dynamic Keywords Injector Plugin <= 2.3.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Seerox WP Dynamic Keywords Injector plugin = 2.3.15 versions...

5.4CVSS9AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/14 12:00 a.m.•12 views

PT-2023-15187 · WordPress · Seerox Wp Dynamic Keywords Injector

Name of the Vulnerable Software and Affected Versions: Seerox WP Dynamic Keywords Injector plugin versions 2.3.15 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.8AI score0.00253EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/03/14 12:00 a.m.•13 views

WordPress Plugin Seerox WP Dynamic Keywords Injector 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Seerox WP...

8.8CVSS8.2AI score0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder