Lucene search
+L

25 matches found

Kitploit
Kitploit
•added 2026/09/29 5:10 p.m.•11 views

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

8.8CVSS6.5AI score0.00323EPSS
SaveExploits2
CVE
CVE
•added 2026/02/01 12:15 p.m.•30 views

CVE-2021-47919

CVE-2021-47919 affects Simple CMS 2.1. The vulnerability is a non-persistent cross-site scripting (XSS) flaw in the preview.php file’s id parameter, exploitable via a GET request. Attackers can inject malicious script code to execute in the context of authenticated users, with potential consequen...

6.4CVSS6.1AI score0.00333EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/01 12:15 p.m.•8 views

CVE-2021-47919 Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview Parameter

Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform phishing attacks...

6.4CVSS5.5AI score0.00333EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/20 3:16 p.m.•14 views

CVE-2025-15380

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'nx-preview' POST parameter in all versions up to, and including, 3.2.0. Thi...

7.2CVSS0.00276EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/20 2:26 p.m.•43 views

CVE-2025-15380 NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'nx-preview' POST parameter in all versions up to, and including, 3.2.0. Thi...

7.2CVSS0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/20 2:26 p.m.•6 views

CVE-2025-15380 NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'nx-preview' POST parameter in all versions up to, and including, 3.2.0. Thi...

7.2CVSS5.7AI score0.00276EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•21 views

PT-2026-3573

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'nx-preview' POST parameter in all versions up to, and including, 3.2.0. Thi...

7.2CVSS5.7AI score0.00276EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 12:35 p.m.•24 views

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

8.8CVSS8AI score0.00323EPSS
SaveExploits2References1
NVD
NVD
•added 2025/10/27 4:15 p.m.•22 views

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

8.8CVSS0.00323EPSS
SaveExploits2References2
CVE
CVE
•added 2025/10/27 12:00 a.m.•44 views

CVE-2023-49440

AhnLab EPP Management (Centralised Endpoint Security Management) version 1.0.15 and prior is vulnerable to Boolean-based and time-based SQL Injection within the web admin interface. The flaw resides in the improper manipulation of the preview parameter (and the list parameter) within the JSON str...

8.8CVSS7.6AI score0.00323EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/10/27 12:00 a.m.•24 views

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

0.00323EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/10/27 12:00 a.m.•12 views

CVE-2023-49440

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

7.6AI score0.00323EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2023-49440: Improper Neutralization of Special Elements used in an SQL Command

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."...

8.8CVSS5.8AI score0.00323EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-30436

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.0035EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/23 12:32 a.m.•8 views

CVE-2025-10827 PHPJabbers Restaurant Menu Maker preview.php cross site scripting

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made availab...

5.3CVSS5.5AI score0.0035EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2023/10/10 10:15 p.m.•9 views

CVE-2023-36126

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0...

6.1CVSS5.8AI score0.00378EPSS
SaveExploits0References3
OSV
OSV
•added 2023/08/04 12:15 a.m.•15 views

CVE-2023-36138

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting XSS via the theme parameter of preview.php...

6.1CVSS5.8AI score0.00444EPSS
SaveExploits0References2
OSV
OSV
•added 2023/08/01 11:15 p.m.•15 views

CVE-2023-33560

There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

6.1CVSS5.8AI score0.00497EPSS
SaveExploits0References2
OSV
OSV
•added 2019/09/16 1:15 p.m.•14 views

CVE-2016-10957

The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter...

6.1CVSS5.8AI score0.0102EPSS
SaveExploits2References2
Prion
Prion
•added 2018/06/11 1:29 p.m.•25 views

Sql injection

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

6.5CVSS7.5AI score0.01059EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder