Lucene search
K

144 matches found

Cvelist
Cvelist
added 2024/09/06 12:0 a.m.17 views

CVE-2024-44839

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

0.00492EPSS
Exploits1References1
NVD
NVD
added 2024/04/04 5:15 a.m.17 views

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

7.5CVSS7.1AI score0.00586EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/04 12:0 a.m.12 views

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

7.7AI score0.00586EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/04 12:0 a.m.12 views

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

7.4AI score0.00586EPSS
Exploits0References1
CVE
CVE
added 2024/04/04 12:0 a.m.65 views

CVE-2024-31025

CVE-2024-31025 concerns ECshop 4.x. The vulnerability is a SQL injection in the file/article.php component, allowing an attacker to obtain sensitive information from the backend database. Affected software is ECshop 4.x; the root cause is lack of input validation in the SQL statements executed by...

7.5CVSS7.4AI score0.00586EPSS
Exploits0References1
OSV
OSV
added 2024/03/06 10:58 a.m.18 views

BIT-MEDIAWIKI-2023-45364

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestam...

5.3CVSS5.3AI score0.00421EPSS
Exploits0References3
NVD
NVD
added 2024/03/01 5:15 p.m.12 views

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

8.8CVSS7.2AI score0.00316EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/03/01 12:0 a.m.21 views

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

7.3AI score0.00316EPSS
Exploits1References1
CVE
CVE
added 2024/03/01 12:0 a.m.66 views

CVE-2024-27689

The vulnerability CVE-2024-27689 affects Stupid Simple CMS v1.2.4 and is a Cross-Site Request Forgery (CSRF) via /update-article.php. CVSSv3.1 base score 8.8 ( HIGH ); attack vector Network, privileges required NONE, user interaction REQUIRED, confidentiality/ integrity/ availability HIGH. Connec...

8.8CVSS7.4AI score0.00316EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/16 12:0 a.m.15 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.2AI score0.0045EPSS
Exploits1References2
NVD
NVD
added 2023/12/14 12:15 a.m.11 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS0.00475EPSS
Exploits1References1
OSV
OSV
added 2023/12/14 12:15 a.m.17 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS6.2AI score0.00475EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/12/13 12:0 a.m.19 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.2AI score0.00475EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/10/09 12:0 a.m.18 views

CVE-2023-45364

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestam...

7AI score0.00421EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.3 views

MediaWiki Security Breach

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki, which stems from includes/page/Article.php checking...

5.3CVSS6.8AI score0.00421EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/10/06 12:0 a.m.1 views

PT-2023-6328 · Mediawiki +2 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.36.x through 1.39.x before 1.39.5 MediaWiki versions 1.40.x before 1.40.1 Description: An issue was discovered in includes/page/Article.php. Deleted revision existence is leaked due to incorrect permissions being checked,...

9.8CVSS6AI score0.22699EPSS
Exploits27References119
ATTACKERKB
ATTACKERKB
added 2023/08/17 8:15 p.m.2 views

CVE-2023-31946

File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php...

7.2CVSS6.2AI score0.01211EPSS
Exploits1References2
NVD
NVD
added 2022/08/23 4:15 p.m.14 views

CVE-2022-37111

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...

9.8CVSS0.00749EPSS
Exploits1References1
Prion
Prion
added 2022/08/23 4:15 p.m.18 views

Sql injection

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...

7.5CVSS9.8AI score0.00749EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/08/23 3:20 p.m.56 views

CVE-2022-37111

CVE-2022-37111 concerns BlueCMS 1.6, where a SQL injection vulnerability is present in the file path admin/article.php at line 132. The issue stems from unsafeguarded database queries, enabling an attacker to inject SQL through input handled by that code path. The CVE has a NVD base score of 9.8 ...

9.8CVSS9.9AI score0.00749EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder