Lucene search
K

13540 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:22 a.m.5 views

CVE-2008-6046

SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in 1 optinout.php.inc, 2 confirmation.php.inc, and 3 renewal.php.inc in mailinglist/...

7.5CVSS8.8AI score0.00354EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:10 a.m.3 views

CVE-2019-11363

A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...

7.2CVSS8.4AI score0.00577EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:36 a.m.8 views

CVE-2024-34932

A SQL injection vulnerability in /model/updateexam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

9.8CVSS8.5AI score0.00122EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:36 a.m.6 views

CVE-2024-34927

A SQL injection vulnerability in /model/updateclassroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

9.8CVSS8.5AI score0.00122EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.4 views

CVE-2024-34928

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

7.3CVSS8.5AI score0.00076EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.5 views

CVE-2024-34931

A SQL injection vulnerability in /model/updatesubject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

9.8CVSS8.5AI score0.00122EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.4 views

CVE-2024-41512

A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via the "bomid" parameter...

8.8CVSS8.9AI score0.01839EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:34 a.m.5 views

CVE-2024-41238

A SQL injection vulnerability in /smsa/studentlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...

5.3CVSS8.6AI score0.00136EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.10 views

CVE-2025-23220

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarraca.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in...

10CVSS8.4AI score0.00483EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:48 a.m.3 views

CVE-2022-27472

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

9.8CVSS8.6AI score0.00264EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:22 a.m.4 views

CVE-2006-3263

SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS8.7AI score0.00509EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51436

Name of the Vulnerable Software and Affected Versions AIOSEO Plugin Team Broken Link Checker versions through 1.2.6 Description The Broken Link Checker component contains a flaw due to improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. Thi...

7.6CVSS7.5AI score0.00032EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/02 12:0 a.m.1 views

CVE-2025-65896

SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys...

8.2AI score0.00036EPSS
Exploits0References2
GitLab Advisory Database
GitLab Advisory Database
added 2025/10/22 12:0 a.m.4 views

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

An authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can exploit this vulnerability to execute arbitrary SQL commands. This can lead to a...

7.2CVSS8.2AI score0.00045EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/10 11:2 a.m.4 views

CVE-2025-11188 CVE-2025-11188

The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database...

0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-2868

Malware in sbrugna...

7.5CVSS6.4AI score0.00431EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-3636

Malware in sbrugna...

9.8CVSS6.4AI score0.0042EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-5981

Malware in sbrugna...

7.5CVSS6.4AI score0.00498EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-6135

Malware in sbrugna...

7.5CVSS6.4AI score0.01097EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-4762

Malware in sbrugna...

7.5CVSS6.4AI score0.00558EPSS
Exploits0References4
Rows per page
Query Builder