Lucene search
+L

8 matches found

NVD
NVD
added 2025/11/17 6:15 p.m.12 views

CVE-2024-44651

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2025-24986

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00403EPSS
SaveExploits0References5
NVD
NVD
added 2025/07/27 4:15 a.m.12 views

CVE-2025-8220

A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...

9.4CVSS0.00609EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2025/07/27 3:02 a.m.6 views

CVE-2025-8220 Engeman Web Password Recovery RecoveryPass sql injection

A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...

7.5CVSS7.2AI score0.00609EPSS
SaveExploits2References4
CVE
CVE
added 2025/03/17 10:00 a.m.65 views

CVE-2025-2372

PHPGurukul Human Metapneumovirus Testing Management System 1.0 has a SQL injection vulnerability in /password-recovery.php (username parameter). Exploitation is remote and publicly disclosed. Root cause: lack of input validation for the username leading to SQL query manipulation. Impact: confiden...

9.8CVSS7.5AI score0.00534EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/10/19 12:00 a.m.12 views

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability in the username parameter of the /admin/password-recovery.php page of the Reset You...

9.8CVSS7.7AI score0.00683EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/03/13 12:00 a.m.17 views

PT-2023-16204 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns the Akuvox E11 password recovery webpage, which can be accessed without proper authentication. This allows an attacker to download the device key file and subsequently...

9.1CVSS9.1AI score0.00634EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/01/14 12:00 a.m.12 views

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-01866)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...

6.1CVSS6.1AI score0.00675EPSS
SaveExploits1References1
Rows per page
Query Builder