Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/07/10 10:14 p.m.•14 views

CVE-2025-7198

A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

9.8CVSS7.9AI score0.00454EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/08 10:02 p.m.•38 views

CVE-2025-7198

CVE-2025-7198 affects Jonnys Liquor 1.0; vulnerability in the /admin/admin-area.php file where the drink parameter is susceptible to SQL injection. Exploitation can be remote and public disclosures exist. Connected reports consistently describe an SQL injection in the same parameter/file. No conc...

9.8CVSS7AI score0.00454EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•3 views

CVE-2025-7198: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

9.8CVSS5.5AI score0.00454EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/23 4:15 p.m.•23 views

Sql injection

Bluecms 1.6 has SQL injection in line 132 of admin/area.php...

7.5CVSS9.8AI score0.15039EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•3 views

CVE-2022-37113: Improper Neutralization of Special Elements used in an SQL Command

Bluecms 1.6 has SQL injection in line 132 of admin/area.php...

9.8CVSS8.2AI score0.15039EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/23 12:00 a.m.•3 views

CVE-2009-4047: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to area.php; the 2 pagina, 3 sentido, 4 qregistros, and 5 orden parameters to area.php; 6 the qregistros parameter to solicdisplay.php; 7 the...

4.3CVSS5.9AI score0.01943EPSS
SaveExploits7References2
Rows per page
Query Builder