Lucene search
+L

5 matches found

OSV
OSV
added 2026/01/16 12:16 a.m.7 views

CVE-2021-47811

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the orderby parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the orderby parameter in POST requests to the ajaxlist endpoint to potentially extract or modify database...

8.8CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2026/01/16 12:16 a.m.10 views

CVE-2021-47811

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the orderby parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the orderby parameter in POST requests to the ajaxlist endpoint to potentially extract or modify database...

9.1CVSS0.00531EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.4 views

CVE-2021-47811

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the orderby parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the orderby parameter in POST requests to the ajaxlist endpoint to potentially extract or modify database...

9.1CVSS6AI score0.00531EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/01/15 11:25 p.m.16 views

CVE-2021-47811

CVE-2021-47811 affects Grocery Crud 1.6.4. A SQL injection exists in the order_by parameter that allows remote attackers to manipulate queries. The vulnerability can be exploited via the order_by[] parameter in POST requests to the ajax_list endpoint, potentially enabling data extraction or modif...

9.1CVSS7.8AI score0.00531EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/15 11:25 p.m.34 views

CVE-2021-47811 Grocery crud 1.6.4 - 'order_by' SQL Injection

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the orderby parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the orderby parameter in POST requests to the ajaxlist endpoint to potentially extract or modify database...

9.1CVSS0.00531EPSS
Exploits1References4
Rows per page
Query Builder