3 matches found
PT-2026-41125
Name of the Vulnerable Software and Affected Versions eMagicOne Store Manager versions prior to 1.3.3 Description Improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a type of attack where the application does not return data...
9.3CVSS5.9AI score0.00372EPSS
SaveExploits0References6
EUVD-2007-3479
Malware in sbrugna...
6.8CVSS6.4AI score0.02052EPSS
SaveExploits0References8
CVE-2007-3494
Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins, which allows remote authenticated users to 1 read the entire database by accessing the database backup plugin via a devtools/templates/newdumpbackend.html argument in the templa...
6.8CVSS6.3AI score0.02052EPSS
SaveExploits0References7
20