Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:32 p.m.•22 views

CVE-2026-6164

A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/13 6:30 a.m.•13 views

EUVD-2026-21875

A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References6
CVE
CVE
•added 2026/04/13 5:30 a.m.•32 views

CVE-2026-6164

Code-projects Lost and Found Thing Management 1.0 contains a SQL injection in an unknown area of /addcat.php via the cata argument. This vulnerability can be triggered remotely and is substantiated by public exploit activity. The CVE-2026-6164 details, as tracked by NVD and CVE records, show a ne...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/13 5:30 a.m.•9 views

CVE-2026-6164 code-projects Lost and Found Thing Management addcat.php sql injection

A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•34 views

PT-2026-32275

A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References6
NVD
NVD
•added 2012/02/08 12:55 a.m.•28 views

CVE-2012-1022

SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the catparentid parameter in an addcat action...

7.5CVSS8.3AI score0.0101EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2012/02/08 12:00 a.m.•6 views

PT-2012-3020

Name of the Vulnerable Software and Affected Versions 4images version 1.7.10 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cat parent id parameter in an "addcat" action. This occurs in the admin/categories.php file. Recommendations...

4.3CVSS0.01528EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
•added 2012/02/08 12:00 a.m.•4 views

PT-2012-3021

Name of the Vulnerable Software and Affected Versions 4images version 1.7.10 Description The issue allows remote attackers to execute arbitrary SQL commands via the cat parent id parameter in an "addcat" action. This is a SQL injection vulnerability in the admin/categories.php file. Recommendatio...

7.5CVSS0.0101EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/08 12:00 a.m.•4 views

CVE-2012-1021: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the catparentid parameter in an addcat action...

4.3CVSS6AI score0.01528EPSS
SaveExploits2References2
Rows per page
Query Builder