Lucene search
+L

16 matches found

NVD
NVD
•added 2026/08/31 4:17 a.m.•25 views

CVE-2026-82612

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/31 3:45 a.m.•34 views

CVE-2026-82612

itsourcecode Online Medicine Delivery System 1.0 is vulnerable to SQL injection in the loadResultList function within the file /index.php?q=single-item (Product Detail Page). The injection is triggered by manipulating the ID argument , and the attack is remote and unauthenticated . The exploit ha...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/31 3:45 a.m.•59 views

CVE-2026-82612 itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

7.5CVSS0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•7 views

CVE-2026-82612: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•21 views

PT-2026-83693

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/02/23 7:25 p.m.•17 views

CVE-2019-25440

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS5.7AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/22 2:16 p.m.•19 views

CVE-2019-25440

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/22 1:34 p.m.•40 views

CVE-2019-25440 WebIncorp ERP Every version SQL Injection via product_detail.php

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/22 12:00 a.m.•20 views

PT-2026-21441

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prod id parameter. Attackers can send GET requests to product detail.php with malicious prod id values to extract sensitive database...

8.8CVSS5.9AI score0.00247EPSS
SaveExploits0References3
NVD
NVD
•added 2026/02/03 6:16 p.m.•35 views

CVE-2020-37108

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of productdetail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS0.00316EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/03 4:52 p.m.•19 views

EUVD-2020-30986

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of productdetail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS5.8AI score0.00316EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/03 12:00 a.m.•21 views

PhpIX SQL注入漏洞

PhpIX is a website building system developed by PhpIX Company in Thailand. PhpIX has a SQL injection vulnerability; this vulnerability stems from the id parameter in the productdetail.php file, which allows for SQL injections, potentially enabling remote attackers to manipulate database queries...

7.1CVSS5.9AI score0.00316EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•16 views

SourceCodester Advanced Web Store 安全漏洞

SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. A security vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter prodid in the file /productdetail.php, which could lead to a SQL injectio...

9.8CVSS7.7AI score0.00639EPSS
SaveExploits1References5
Openbugbounty
Openbugbounty
•added 2018/03/20 9:08 a.m.•19 views

cresey.com XSS vulnerability

Open Bug Bounty ID: OBB-582978 Description| Value ---|--- Affected Website:| cresey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/01/04 1:41 p.m.•15 views

audiolab.co.uk XSS vulnerability

Vulnerable URL: http://www.audiolab.co.uk/product-detail.php?pid=15'"--!...

6.9AI score
SaveExploits0
zdt
zdt
•added 2010/11/03 12:00 a.m.•39 views

Site2nite Vacation Rental (VRBO) Listings SQL Injection Vulnerability

Exploit for asp platform in category web applications ===================================================================== Site2nite Vacation Rental VRBO Listings SQL Injection Vulnerability =====================================================================...

7.1AI score
SaveExploits0
Rows per page
Query Builder