Lucene search
+L

5034 matches found

NVD
NVD
•added 2025/01/07 11:15 a.m.•17 views

CVE-2025-22347

Cross-Site Request Forgery CSRF vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through = 3.9...

8.2CVSS0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 10:49 a.m.•33 views

CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS0.00384EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 10:48 a.m.•58 views

CVE-2025-22348 WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through = 1.4.0...

8.5CVSS0.00366EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 10:48 a.m.•72 views

CVE-2025-22348

CVE-2025-22348 corresponds to a SQL Injection vulnerability in the WordPress DynamicTags plugin (versions n/a through 1.4.0). Multiple connected sources describe an improper neutralization of special elements used in SQL commands (SQLi), leading to blind SQL injection. Affected component is the D...

8.5CVSS7.3AI score0.00366EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•17 views

PT-2025-4461 · Unknown · Bsk Forms Blacklist

Name of the Vulnerable Software and Affected Versions: BSK Forms Blacklist versions n/a through 3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a...

8.2CVSS9.8AI score0.00194EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•0 views

CVE-2025-22348: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through = 1.4.0...

8.5CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•1 views

CVE-2025-22347: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through = 3.9...

8.2CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•2 views

CVE-2024-51715: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS5.8AI score0.00384EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•1 views

CVE-2025-22352: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Blind SQL Injection.This issue affects ELEX...

7.6CVSS5.8AI score0.00732EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/01/06 1:59 a.m.•217 views

Exploit for CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details...

7.6CVSS9.9AI score0.00732EPSS
SaveExploits1
NVD
NVD
•added 2024/12/30 7:15 p.m.•37 views

CVE-2024-56801

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

9.8CVSS0.00721EPSS
SaveExploits0References2
Prion
Prion
•added 2024/12/30 7:15 p.m.•22 views

CVE-2024-56801

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

0.00721EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/30 6:10 p.m.•80 views

CVE-2024-56801

Tasklists for GLPI has a blind SQL injection vulnerability in versions prior to 2.0.4, fixed by the 2.0.4 patch. Some sources indicate the issue affects the /ajax/reorder.php endpoint. The CVE documents high impact (per CVSS data) but no exploit details are provided in the connected documents. Re...

9.8CVSS7.5AI score0.00721EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/30 6:10 p.m.•12 views

CVE-2024-56801 Tasklists has Blind SQL Injection in /ajax/reorder.php

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

6.9CVSS7.9AI score0.00721EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•2 views

CVE-2024-56801: Improper Neutralization of Special Elements used in an SQL Command

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

9.8CVSS5.8AI score0.00721EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/25 1:15 p.m.•10 views

CVE-2024-8950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00619EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/25 12:16 p.m.•32 views

CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00619EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/25 12:00 a.m.•1 views

CVE-2024-8950: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00619EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/16 3:15 p.m.•33 views

CVE-2024-55986

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tiny13 Service service allows Blind SQL Injection.This issue affects Service: from n/a through = 1.0.4...

8.5CVSS0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:31 p.m.•13 views

CVE-2024-55982 WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in richteam Share Buttons – Social Media allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through 1.0.2...

9.3CVSS7.9AI score0.0175EPSS
SaveExploits1References1
Rows per page
Query Builder