Lucene search
+L

139 matches found

CVE
CVE
•added 2026/05/13 1:27 p.m.•34 views

CVE-2026-4608

CVE-2026-4608 affects the WordPress ProfileGrid – User Profiles, Groups and Communities plugin (versions up to and including 5.9.8.4). It describes a blind SQL Injection via the rid parameter, caused by insufficient escaping of user input and inadequate query preparation, allowing authenticated a...

6.5CVSS5.9AI score0.00451EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/05/13 1:27 p.m.•72 views

CVE-2026-4608 ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS0.00451EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/13 1:27 p.m.•7 views

CVE-2026-4608

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.9AI score0.00451EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•22 views

WordPress plugin ProfileGrid SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.5CVSS5.9AI score0.00451EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•24 views

PT-2026-40610

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.9AI score0.00451EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•0 views

CVE-2026-4608: Improper Neutralization of Special Elements used in an SQL Command

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.7AI score0.00451EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 11:36 a.m.•16 views

CVE-2021-41928

SQL injection in Sourcecodester Try My Recipe Recipe Sharing Website - CMS 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the viewrecipe page...

9.8CVSS8.7AI score0.01881EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/11/12 12:00 a.m.•13 views

Responsive Hotel Site roombook.php File SQL Injection Vulnerability

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /admin/roombook.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00381EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/08 2:50 p.m.•26 views

CVE-2025-12857

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS6.9AI score0.00381EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/07 2:15 p.m.•16 views

CVE-2025-12857

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS5.8AI score0.00381EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/07 2:15 p.m.•12 views

CVE-2025-12857

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS0.00381EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/07 2:02 p.m.•34 views

CVE-2025-12857

The CVE-2025-12857 issue affects code-projects Responsive Hotel Site 1.0 in /admin/roombook.php where manipulating the rid parameter triggers SQL injection. Multiple connected sources corroborate a remote-exploit scenario with publicly disclosed exploit code and the potential to access or modify ...

9.8CVSS6.7AI score0.00381EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/07 2:02 p.m.•25 views

CVE-2025-12857 code-projects Responsive Hotel Site roombook.php sql injection

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

5.8CVSS0.00381EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•0 views

CVE-2025-12857: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS5.5AI score0.00381EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•20 views

PT-2025-45423

Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A security issue exists in code-projects Responsive Hotel Site 1.0. Manipulation of the rid argument in an unknown function within the /admin/roombook.php file can lead to SQL...

5.8CVSS5.1AI score0.00381EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•16 views

Code-Projects Responsive Hotel Site SQL注入漏洞

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /admin/roombook.php. An attacker can exploit this vulnerability to...

9.8CVSS5.7AI score0.00381EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2014-8108

Malware in sbrugna...

4.3CVSS6.4AI score0.01119EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2007-6175

Malware in sbrugna...

2.1CVSS6.1AI score0.00346EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-25014

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-32758

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00317EPSS
SaveExploits0References2
Rows per page
Query Builder