Lucene search
K

4691 matches found

Cvelist
Cvelist
added 2025/01/07 10:48 a.m.44 views

CVE-2025-22348 WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through = 1.4.0...

8.5CVSS0.00353EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 10:48 a.m.60 views

CVE-2025-22348

CVE-2025-22348 corresponds to a SQL Injection vulnerability in the WordPress DynamicTags plugin (versions n/a through 1.4.0). Multiple connected sources describe an improper neutralization of special elements used in SQL commands (SQLi), leading to blind SQL injection. Affected component is the D...

8.5CVSS7.3AI score0.00353EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.3 views

PT-2025-4461 · Unknown · Bsk Forms Blacklist

Name of the Vulnerable Software and Affected Versions: BSK Forms Blacklist versions n/a through 3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a...

8.2CVSS9.8AI score0.00187EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2025/01/06 1:59 a.m.196 views

Exploit for CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details...

7.6CVSS9.9AI score0.00705EPSS
Exploits1
NVD
NVD
added 2024/12/30 7:15 p.m.11 views

CVE-2024-56801

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

9.8CVSS0.00694EPSS
Exploits0References2
Prion
Prion
added 2024/12/30 7:15 p.m.6 views

CVE-2024-56801

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

0.00694EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/30 6:10 p.m.6 views

CVE-2024-56801 Tasklists has Blind SQL Injection in /ajax/reorder.php

Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability...

6.9CVSS7.9AI score0.00694EPSS
Exploits0References2
CVE
CVE
added 2024/12/30 6:10 p.m.59 views

CVE-2024-56801

Tasklists for GLPI has a blind SQL injection vulnerability in versions prior to 2.0.4, fixed by the 2.0.4 patch. Some sources indicate the issue affects the /ajax/reorder.php endpoint. The CVE documents high impact (per CVSS data) but no exploit details are provided in the connected documents. Re...

9.8CVSS7.5AI score0.00694EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/12/25 1:15 p.m.4 views

CVE-2024-8950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00592EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/25 12:16 p.m.19 views

CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00592EPSS
Exploits0References2
NVD
NVD
added 2024/12/16 3:15 p.m.13 views

CVE-2024-55986

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tiny13 Service service allows Blind SQL Injection.This issue affects Service: from n/a through = 1.0.4...

8.5CVSS0.0048EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 2:31 p.m.11 views

CVE-2024-55982 WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in richteam Share Buttons – Social Media allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through 1.0.2...

9.3CVSS7.9AI score0.01668EPSS
Exploits1References1
NVD
NVD
added 2024/12/06 2:15 p.m.7 views

CVE-2024-53815

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.5.1...

8.5CVSS0.00493EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/06 1:6 p.m.20 views

CVE-2024-53807 WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in brandtoss WP Mailster wp-mailster allows Blind SQL Injection.This issue affects WP Mailster: from n/a through = 1.8.16.0...

8.5CVSS0.0045EPSS
Exploits0References1
CVE
CVE
added 2024/12/06 1:6 p.m.50 views

CVE-2024-53807

WP Mailster (Brandtoss) CVE-2024-53807 is a SQL Injection vulnerability affecting WP Mailster versions up to 1.8.16.0. Public docs indicate an authenticated (Contributor+) SQL injection via the orderby parameter, described as Blind SQL Injection with high impact. Patch status in the CVE details i...

9.8CVSS7.3AI score0.0045EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/12/06 1:5 p.m.55 views

CVE-2024-53817

CVE-2024-53817 affects the WordPress plugin Product Labels For Woocommerce (Acowebs) and is caused by improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Affected versions are 1.5.8 and earlier. The vulnerability is described as allowing Blind SQL Injectio...

7.6CVSS7.3AI score0.00423EPSS
Exploits0References1
NVD
NVD
added 2024/12/02 2:15 p.m.13 views

CVE-2024-53793

Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...

8.2CVSS0.002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:48 p.m.4 views

CVE-2024-53793 WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through 1.29...

8.2CVSS7.6AI score0.002EPSS
Exploits0References1
CVE
CVE
added 2024/12/02 1:48 p.m.50 views

CVE-2024-53793

CVE-2024-53793 describes a CSRF to SQL Injection vulnerability in the WordPress plugin eDoc Easy Tables (versions

8.2CVSS7.3AI score0.002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:0 a.m.2 views

PT-2024-35907 · Unknown · Edoc Easy Tables

Name of the Vulnerable Software and Affected Versions: eDoc Easy Tables versions prior to 1.29 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a web...

8.2CVSS7.7AI score0.002EPSS
Exploits0References4
Rows per page
Query Builder