33 matches found
CVE-2023-51504
CVE-2023-51504 This is a dockerized reproduction of the MotoCMS SQL injection cf exploit db Description MotoCMS Version 3.4.3 SQL Injection via the keyword parameter on the link https://template189526.motopreview.com/store/category/search/?keyword=1 Reproducing the vulnerability involved defining...
EUVD-2023-40190
Malicious code in bioql PyPI...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36210
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
MotoCMS SQL Injection Vulnerability
MotoCMS is a simple website builder from MotoCMS. MotoCMS version v3.4.3 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. The vulnerability can be exploited by an attacker to gain privileges via the keyword...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
Sql injection
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
PT-2023-25484
Name of the Vulnerable Software and Affected Versions MotoCMS version 3.4.3 Description A SQL injection issue allows a remote attacker to gain privileges via the keyword parameter of the search function. This enables the attacker to potentially access or manipulate sensitive data. Recommendations...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36213: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36213
CVE-2023-36213 affects MotoCMS v3.4.3 and is a SQL injection in the search function through the keyword parameter, enabling a remote attacker to gain privileges. The entry is evaluated with a high/severe impact (CVSS v3.1: 9.8, Confidentiality/Integrity/Availability all High) and is network-based...
MotoCMS Code Execution Vulnerability
MotoCMS is a simple website builder from MotoCMS. A code execution vulnerability exists in MotoCMS that can be exploited by an attacker to execute arbitrary code on the system...
CVE-2023-36210
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
CVE-2023-36210
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...
Sql injection
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...