Lucene search
+L

5486 matches found

CVE
CVE
•added 2026/10/06 12:00 a.m.•15 views

CVE-2025-45871

LogicalDOC Enterprise, version 9.1.1 and below , is vulnerable to a blind SQL injection within the WorkflowsDataServlet component. This flaw allows an authenticated user to manipulate SQL queries by providing a crafted workflow template name . The impact involves unauthorized data access or manip...

8.1CVSS5.7AI score0.00255EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•9 views

CVE-2025-45871: Improper Neutralization of Special Elements used in an SQL Command

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

8.1CVSS5.7AI score0.00255EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/06 12:00 a.m.•42 views

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

0.00255EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/06 12:00 a.m.•12 views

EUVD-2025-211038

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

5.7AI score0.00255EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/06 12:00 a.m.•8 views

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

5.7AI score0.00255EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/05 8:17 p.m.•11 views

CVE-2026-103066

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

8.5CVSS0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/05 7:17 p.m.•19 views

CVE-2026-103352

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

9.3CVSS0.00247EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 7:00 p.m.•9 views

EUVD-2026-92753

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

8.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 7:00 p.m.•8 views

CVE-2026-103066 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

8.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 7:00 p.m.•33 views

CVE-2026-103066 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

8.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 7:00 p.m.•27 views

CVE-2026-103066

The WP BASE Booking WordPress plugin (versions 6.4.0 and below ) is vulnerable to a Blind SQL Injection flaw. The root cause is the Improper Neutralization of Special Elements used in an SQL Command , which allows an attacker to execute malicious SQL queries. While the documents confirm the vulne...

8.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 6:08 p.m.•9 views

EUVD-2026-92591

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

9.3CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 6:08 p.m.•38 views

CVE-2026-103352 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

9.3CVSS0.00247EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 6:08 p.m.•39 views

CVE-2026-103352

The WP BASE Booking WordPress plugin (versions 6.4.0 and below ) is vulnerable to a Blind SQL Injection flaw. The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to potentially execute malicious SQL queries. No specific e...

9.3CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 6:08 p.m.•14 views

CVE-2026-103352 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

9.3CVSS5.8AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/05 9:17 a.m.•21 views

CVE-2026-104408

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

7.6CVSS0.00279EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/05 9:17 a.m.•16 views

CVE-2026-104389

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

8.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 8:57 a.m.•25 views

CVE-2026-104389

The Sirv WordPress plugin versions up to and including 8.2.5 are vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation allows an attacker to execute arbitrary SQL commands. No specific exploit...

8.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 8:57 a.m.•8 views

CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

8.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 8:57 a.m.•11 views

EUVD-2026-92328

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

8.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder