Lucene search
K

7 matches found

Veracode
Veracode
added 2025/11/27 9:40 a.m.5 views

SQL Injection

melisplatform/melis-cms is vulnerable to SQL injection.The vulnerability is due to improper validation of the idPage parameter in the /melis/MelisCms/PageEdition/getTinyTemplates endpoint, which allows an attacker to retrieve, create, update, or delete database records through crafted SQL queries...

9.3CVSS7.5AI score0.00391EPSS
Exploits2References4Affected Software1
Github Security Blog
Github Security Blog
added 2025/10/08 12:30 p.m.5 views

Melis Platform CMS SQL Injection

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

9.3CVSS8.1AI score0.00391EPSS
Exploits2References5Affected Software1
NVD
NVD
added 2025/10/08 11:15 a.m.2 views

CVE-2025-10351

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

9.3CVSS0.00391EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2025/10/08 10:45 a.m.2 views

CVE-2025-10351 SQL injection vulnerability in Melis Platform

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

9.3CVSS7.6AI score0.00391EPSS
Exploits2References2
Cvelist
Cvelist
added 2025/10/08 10:45 a.m.7 views

CVE-2025-10351 SQL injection vulnerability in Melis Platform

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

9.3CVSS0.00391EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.2 views

PT-2025-41244

Name of the Vulnerable Software and Affected Versions Melis platform affected versions not specified Description A SQL injection issue exists in the melis-cms module of the Melis platform. This allows an attacker to retrieve, create, update, and delete databases. The vulnerability is located in t...

9.3CVSS7.3AI score0.00391EPSS
Exploits2References13
Patchstack
Patchstack
added 2022/10/27 12:0 a.m.21 views

WordPress Bricks Builder premium theme <= 1.5.3 - Auth. Arbitrary Post/Page Edition vulnerability

Auth. Arbitrary Post/Page Edition vulnerability discovered by RG in WordPress Bricks Builder premium theme versions = 1.5.3. Solution Update the WordPress Bricks Builder theme to the latest available version at least 1.5.4...

6.5CVSS3.3AI score0.00618EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder