4 matches found
CVE-2019-25391 Ashop Shopping Cart Software Lastest Latest SQL Injection via bannedcustomers.php
Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter. Attackers can send POST requests to the admin/bannedcustomers.php endpoint with crafted SQL payloads using SLEEP functio...
EUVD-2020-9942
Malware in sbrugna...
CVE-2020-18013
SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?adminbanned/add.htm...
PT-2021-10116
Name of the Vulnerable Software and Affected Versions: Whatsns version 4.0 Description: A SQL Injection issue exists, allowing potential exploitation via the ip parameter in the "index.php?admin banned/add.htm" endpoint. Recommendations: For Whatsns version 4.0, consider restricting access to the...