Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/12/12 10:17 p.m.1 views

CVE-2024-58301

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS8AI score0.00033EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/12 12:30 a.m.3 views

EUVD-2024-55331

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS7.4AI score0.00033EPSS
Exploits0References4
NVD
NVD
added 2025/12/11 10:15 p.m.1 views

CVE-2024-58301

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS0.00033EPSS
Exploits0References3
CVE
CVE
added 2025/12/11 9:39 p.m.5 views

CVE-2024-58301

Purei CMS 1.0 is affected by a time-based blind SQL injection via unfiltered input parameters. Exploitable endpoints include getAllParks.php and events-ajax.php, enabling an attacker to manipulate database queries and potentially extract or modify data. Root cause is a time-based blind SQL inject...

9.3CVSS7.6AI score0.00033EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/11 9:39 p.m.16 views

CVE-2024-58301 Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS0.00033EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/11 9:39 p.m.1 views

CVE-2024-58301 Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS7.6AI score0.00033EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.0 views

Purei CMS SQL注入漏洞

Purei CMS is a content management system from the Dutch company Purei. A SQL injection vulnerability exists in Purei CMS version 1.0, which originates from a blind time-based SQL injection of unfiltered user input parameters, which could lead to the disclosure or tampering of database information...

9.3CVSS7.6AI score0.00033EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.2 views

PT-2025-50754

Name of the Vulnerable Software and Affected Versions Purei CMS version 1.0 Description Purei CMS version 1.0 contains a time-based blind SQL injection vulnerability. Attackers can manipulate database queries through unfiltered user input parameters. The vulnerability can be exploited through...

9.3CVSS7.4AI score0.00033EPSS
Exploits0References6
0day.today
0day.today
added 2024/03/29 12:0 a.m.227 views

Purei CMS 1.0 - SQL Injection Vulnerability

Exploit Title: Purei CMS 1.0 - SQL Injection Exploit Author: Number 7 Vendor Homepage: purei.com Version: 1.0 Tested on: Linux Introduction: An SQL injection vulnerability permits attackers to modify backend SQL statements through manipulation of user input. Such an injection transpires when web...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2024/03/28 12:0 a.m.310 views

Purei CMS 1.0 - SQL Injection

Exploit Title: Purei CMS 1.0 - SQL Injection Date: 27-03-2024 Exploit Author: Number 7 Vendor Homepage: purei.com Version: 1.0 Tested on: Linux Introduction: An SQL injection vulnerability permits attackers to modify backend SQL statements through manipulation of user input. Such an injection...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2024/03/28 12:0 a.m.217 views

Purei CMS 1.0 SQL Injection

Exploit Title: Purei CMS 1.0 - SQL Injection Date: 27-03-2024 Exploit Author: Number 7 Vendor Homepage: purei.com Version: 1.0 Tested on: Linux Introduction: An SQL injection vulnerability permits attackers to modify backend SQL statements through manipulation of user input. Such an injection...

7.4AI score
Exploits0
Rows per page
Query Builder