Lucene search
+L

219913 matches found

Nuclei
Nuclei
added yesterday199 views

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

9.8CVSS9AI score0.58743EPSS
SaveExploits0References5
Nuclei
Nuclei
added yesterday52 views

Subscribe to Category <= 2.7.4 - SQL Injection

The Subscribe to Category contains a sqlinjection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL commands, exploit requires user interaction. id: CVE-2023-32590 info: name: Subscribe to Category = 2.7.4 - SQL Injection author:...

9.3CVSS8.4AI score0.01808EPSS
SaveExploits1References2
Nuclei
Nuclei
added yesterday36 views

Mingsoft MCMS 5.2.9 - SQL Injection

Mingsoft MCMS v5.2.9 contains a SQL injection caused by unsanitized categoryType parameter at /content/list.do, letting attackers execute arbitrary SQL commands, exploit requires crafted input. id: CVE-2023-50578 info: name: Mingsoft MCMS 5.2.9 - SQL Injection author: ritikchaddha severity:...

9.8CVSS9.3AI score0.0224EPSS
SaveExploits1References2
Nuclei
Nuclei
added yesterday38 views

WordPress Events Manager <= 7.0.3 - SQL Injection

The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.5CVSS5.8AI score0.59879EPSS
SaveExploits2References4
Nuclei
Nuclei
added yesterday28 views

Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS5.8AI score0.02175EPSS
SaveExploits4References3
Nuclei
Nuclei
added yesterday96 views

PrestaShop Theme Volty CMS Blog - SQL Injection

In the module 'Theme Volty CMS Blog' tvcmsblog up to versions 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-39650 info: name: PrestaShop Theme Volty CMS Blog - SQL Injection author: mastercho severity: critical description: | In the...

9.8CVSS8.8AI score0.03631EPSS
SaveExploits1References2
NVD
NVD
added yesterday8 views

CVE-2026-19973

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.002EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added yesterday22 views

Exploit for CVE-2026-74251

Unauthenticated SQL Injection via Attribute Filter in Phoca Ca...

9.3CVSS7.2AI score0.00372EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-19973

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.3AI score0.002EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added yesterday9 views

CVE-2026-19973 itsourcecode Hospital Management System viewpaymentreport.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.002EPSS
SaveExploits0References6
CVE
CVE
added yesterday20 views

CVE-2026-19973

CVE-2026-19973 affects itsourcecode Hospital Management System 1.0. An SQL injection vulnerability exists in the unknown functionality of /viewpaymentreport.php when manipulating the delid parameter, exploitable remotely. Public exploit is indicated. CVSS metrics from VulDB suggest a medium sever...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday7 views

EUVD-2026-60024

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added yesterday18 views

CVE-2026-19972

CVE-2026-19972 affects itsourcecode Hospital Management System 1.0, with SQL injection in an unknown function of /viewpatient.php via the delid parameter. Remote exploitation is possible, and public disclosure of the exploit is noted. Metrics indicate PoC exploit maturity (CVSS v4.0: 5.3 base, NE...

6.5CVSS6.4AI score0.0025EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday5 views

EUVD-2026-60023

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and ma...

6.5CVSS6.3AI score0.0025EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-19972

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and ma...

6.5CVSS6.3AI score0.0025EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added yesterday8 views

CVE-2026-51346

StudIP (learning management system) has a SQL injection in its store() functions, affecting 6.0.x before 6.0.3 and 5.4.x before 5.4.12. CVSS 9.1 (network, no auth) allows unauthenticated remote attackers to execute arbitrary code and exfiltrate data. CISA SSVC flags it as PoC, automatable, total ...

9.1CVSS6.4AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

6.4AI score
SaveExploits0References3
EUVD
EUVD
added yesterday3 views

EUVD-2026-60357

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

6.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-60535

zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The azuracast:restore command executes the db.sql file extracted from a backup archive without any content validation or sanitization. This allows a remote attacker to escalate...

5.9AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday5 views

CVE-2026-51346

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...

SaveExploits0References2
Rows per page
Query Builder