Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-28097

Malicious code in bioql PyPI...

8.5CVSS8.2AI score0.00179EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-28102

Malicious code in bioql PyPI...

7.1CVSS7AI score0.00185EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/19 3:20 p.m.9 views

CVE-2025-47573

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0...

9.3CVSS5.6AI score0.00232EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/17 3:15 p.m.1 views

CVE-2025-47573

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0...

9.3CVSS5.6AI score0.00232EPSS
Exploits0References3
CVE
CVE
added 2025/06/17 3:1 p.m.12 views

CVE-2025-47573

CVE-2025-47573 is an SQL Injection vulnerability in the mojoomla WordPress School Management plugin (affected versions n/a–92.0.0) due to improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. Public sources in the provided documents identify the issue but do n...

9.3CVSS5.6AI score0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/17 3:1 p.m.2 views

CVE-2025-47573 WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0...

9.3CVSS9.7AI score0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/17 3:1 p.m.10 views

CVE-2025-47573 WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0...

9.3CVSS0.00232EPSS
Exploits0References1
NVD
NVD
added 2025/05/23 1:15 p.m.4 views

CVE-2025-47613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

7.1CVSS0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/23 12:43 p.m.5 views

CVE-2025-47575 WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 92.0.0...

8.5CVSS8.8AI score0.00179EPSS
Exploits0References1
CVE
CVE
added 2025/05/23 12:43 p.m.36 views

CVE-2025-47575

CVE-2025-47575 describes an SQL Injection in the WordPress School Management plugin (mojoomla School Management) affecting versions up to 92.0.0 due to improper neutralization of special elements in SQL commands. The CVSS-3.1 base score is 8.5 (HIGH) with network attack, low complexity, and no us...

8.5CVSS5.6AI score0.00179EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/07 9:39 a.m.3 views

WordPress School Management System for Wordpress plugin <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' vulnerability

Authenticated Subscriber+ SQL Injection via 'mjsmgtshoweventtask' vulnerability discovered by shaman0x01 in WordPress Plugin School Management versions = 92.0.0...

6.5CVSS8.1AI score0.00143EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/03/07 9:15 a.m.3 views

CVE-2024-12609

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and including, 92.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in th...

6.5CVSS5.8AI score0.00128EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/07 8:21 a.m.8 views

CVE-2024-12609 School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and including, 92.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in th...

6.5CVSS0.00128EPSS
Exploits0References2
Rows per page
Query Builder