DomainsPRO SQL注入漏洞

DomainsPRO is an ultimate artificial intelligence domain name generation solution for individual developers at Riftzilla. A SQL injection vulnerability exists in DomainsPRO version 1.2, which stems from an improper manipulation of the parameter d in the file /article.php resulting in SQL injectio...

CVE-2025-40628: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in DomainsPRO 1.2. This vulnerability could allow an attacker to retrieve, create, update and delete databases via the “d” parameter in the “/article.php” endpoint...

The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system allows attackers to execute XSS attacks.

The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

CVE-2025-25823: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...

CVE-2024-57599: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php...

CVE-2024-13132 Emlog Pro Subpage article.php cross site scripting

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13132: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13140: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2024-44839

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

CVE-2024-44839

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

CVE-2024-44839: Improper Neutralization of Special Elements used in an SQL Command

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-31025

The ShopeX ECShop open source mall system (versions 4.x ) is vulnerable to a SQL Injection vulnerability in the file/article.php component. The root cause is a lack of external input SQL statement validation, which allows an attacker to manipulate database queries. Successful exploitation enables...

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-31025: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

BIT-MEDIAWIKI-2023-45364

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestam...

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

CVE-2024-27689: Cross-Site Request Forgery (CSRF)

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...