23296 matches found
CVE-2019-25704
creationtimestamp| type| source ---|---|--- 2026-04-06 00:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miry2g55jk27 2026-04-08 00:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwyetald32c...
CI4MS 跨站脚本漏洞
CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 31.0.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the failure to properly clean user-controlled input when users updated their profile names, which could lead to...
CVE-2019-25688
creationtimestamp| type| source ---|---|--- 2026-04-05 23:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirwxh6rzj25...
CVE-2026-5603
creationtimestamp| type| source ---|---|--- 2026-04-05 23:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvgw46kw2n 2026-04-06 04:18:10+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3misfu7eyij2d...
EUVD-2019-20111
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690 Kados R10 GreenBee SQL Injection via mng_profile_id
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690 Kados R10 GreenBee SQL Injection via mng_profile_id
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690
Kados R10 GreenBee is affected by an SQL injection vulnerability exposed via the mng_profile_id parameter. The issue allows an attacker to manipulate database queries and potentially extract sensitive data. Root cause is an injection flaw in the handling of mng_profile_id (network-accessible, low...
CVE-2026-29923
creationtimestamp| type| source ---|---|--- 2026-04-05 20:00:04+00:00| seen| https://t.me/GithubRedTeam/78979 2026-04-10 13:00:04+00:00| seen| https://t.me/GithubRedTeam/79738 2026-04-10 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67urmbr52z 2026-04-13...
EUVD-2026-19111
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
CVE-2026-5583 concerns PHPGurukul Online Shopping Portal Project 2.1. The vulnerability targets an unknown part of the file /my-profile.php in the Parameter Handler and arises from manipulating the argument fullname , which leads to a SQL injection. The issue is described as exploitable remotely ...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5572
creationtimestamp| type| source ---|---|--- 2026-04-05 15:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4jwnjg62d...
CVE-2026-5599
creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 15:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4f2ag5j2j...