Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•7 views

PT-2025-12643

Name of the Vulnerable Software and Affected Versions JiangQie Official Website Mini Program versions 1.8.2 and earlier Description The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL...

7.6CVSS0.00454EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•4 views

CVE-2025-30604: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jiangqie JiangQie Official Website Mini Program jiangqie-official-website-mini-program allows Blind SQL Injection.This issue affects JiangQie Official Website Mini Program: from n/a through = 1.8.2...

7.6CVSS5.8AI score0.00454EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•21 views

WordPress plugin JiangQie Official Website Mini Program has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

7.6CVSS8.9AI score0.00454EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/09/06 12:00 a.m.•8 views

PT-2021-15840

Name of the Vulnerable Software and Affected Versions JiangQie Official Website Mini Program WordPress plugin versions prior to 1.1.1 Description The issue arises from the plugin's failure to properly escape or validate the id GET parameter before using it in SQL statements, leading to SQL...

8.8CVSS0.01608EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/06 12:00 a.m.•7 views

CVE-2021-24303: Improper Neutralization of Special Elements used in an SQL Command

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues...

8.8CVSS5.9AI score0.01608EPSS
SaveExploits2References3
Rows per page
Query Builder