Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/02/22 1:18 p.m.34 views

CVE-2019-25443 Inventory Webapp SQL Injection via add-item.php

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

8.8CVSS0.00232EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/22 1:18 p.m.7 views

CVE-2019-25443

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

8.8CVSS6.3AI score0.00232EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/02 12:00 a.m.12 views

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the name parameter on the routers/add-item.php page...

9.8CVSS8AI score0.007EPSS
SaveExploits1References3
Rows per page
Query Builder