Lucene search
K

21 matches found

Nuclei
Nuclei
added 18 hours ago30 views

WordPress JoomSport <5.2.8 - SQL Injection

WordPress JoomSport plugin before 5.2.8 contains a SQL injection vulnerability. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operation...

9.8CVSS7.4AI score0.04756EPSS
Exploits2References5
NVD
NVD
added 2026/06/11 10:16 p.m.9 views

CVE-2026-42647

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: from n/a through 5.7.7...

9.3CVSS0.01323EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/06/11 12:0 a.m.8 views

PT-2026-48782

Name of the Vulnerable Software and Affected Versions Beardev JoomSport versions prior to 5.7.7 Description Improper neutralization of special elements used in an SQL command allows for Blind SQL Injection, a technique used to extract information from a database by asking true or false questions...

9.3CVSS5.5AI score0.01323EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-40244

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00417EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-40813

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.0036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:26 a.m.6 views

CVE-2019-14348

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsportseason/new-yorkers/?action=playerlist sid parameter...

9.8CVSS7.7AI score0.21091EPSS
Exploits5References1
OSV
OSV
added 2024/11/01 3:15 p.m.4 views

CVE-2024-44031

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.6.3...

8.8CVSS5.8AI score0.0036EPSS
Exploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.20 views

CVE-2024-44031

Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through = 5.6.3...

8.8CVSS0.0036EPSS
Exploits0References1
OSV
OSV
added 2024/11/01 3:15 p.m.4 views

CVE-2024-43355

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0...

8.8CVSS5.8AI score0.00417EPSS
Exploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.15 views

CVE-2024-43355

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0...

8.8CVSS0.00417EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.15 views

CVE-2024-43355 WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0...

4.3CVSS6.9AI score0.00417EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.14 views

CVE-2024-43355 WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0...

4.3CVSS0.00417EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.47 views

CVE-2024-43355

CVE-2024-43355 is a Missing Authorization vulnerability in the WordPress plugin JoomSport (BearDev) for Sports: Team & League. Affects JoomSport versions up to and including 5.3.0; root cause is misconfigured Access Control Security Levels, enabling unauthorized access. CVSSv3.1 base score 8.8 (N...

8.8CVSS5.7AI score0.00417EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/01 2:17 p.m.52 views

CVE-2024-44031

CVE-2024-44031 corresponds to a WordPress JoomSport plugin vulnerability (versions

8.8CVSS5.9AI score0.0036EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.23 views

CVE-2024-44031 WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through = 5.6.3...

4.3CVSS0.0036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.16 views

CVE-2024-44031 WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.6.3...

4.3CVSS6.9AI score0.0036EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/07 12:0 a.m.5 views

WordPress BearDev JoomSport Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.BearDev JoomSport plugin is a plugin used in it to build sports sites. A SQL injection vulnerability exists in the WordPress...

9.8CVSS8AI score0.21091EPSS
Exploits5References1
NVD
NVD
added 2019/08/05 3:15 p.m.40 views

CVE-2019-14348

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsportseason/new-yorkers/?action=playerlist sid parameter...

9.8CVSS9.8AI score0.21091EPSS
Exploits5References3
Prion
Prion
added 2019/08/05 3:15 p.m.22 views

Sql injection

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsportseason/new-yorkers/?action=playerlist sid parameter...

7.5CVSS9.7AI score0.21091EPSS
Exploits5References3Affected Software1
CVE
CVE
added 2019/08/05 3:0 p.m.110 views

CVE-2019-14348

CVE-2019-14348 affects BearDev JoomSport WordPress plugin 3.3. The vulnerability is a SQL injection in the joomsport_season/new-yorkers/?action=playerlist sid parameter, allowing an attacker to steal, modify, or delete database information. Affected product/version: WordPress JoomSport plugin 3.3 (

9.8CVSS9.6AI score0.21091EPSS
Exploits5References3Affected Software1
Rows per page
Query Builder