Lucene search
+L

5392 matches found

Cvelist
Cvelist
•added 2025/03/26 2:24 p.m.•24 views

CVE-2025-28873 WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

8.5CVSS0.00552EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•2 views

PT-2025-12948

Name of the Vulnerable Software and Affected Versions NotFound Shuffle versions n/a through 0.5 Description The issue is related to an SQL Injection flaw, specifically an Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection. Recommendations For...

8.5CVSS0.00552EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•6 views

PT-2025-12967

Name of the Vulnerable Software and Affected Versions WP Google Calendar Manager versions prior to 2.2 Description The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which...

8.5CVSS0.00569EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•2 views

CVE-2025-28873: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

8.5CVSS5.8AI score0.00552EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•4 views

CVE-2025-28939: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through = 2.1...

8.5CVSS5.8AI score0.00569EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•6 views

PT-2025-12816

Name of the Vulnerable Software and Affected Versions Shamalli Web Directory Free versions 1.7.6 and earlier Description The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection...

9.3CVSS0.00356EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•5 views

CVE-2025-28904: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through = 1.7.6...

9.3CVSS5.8AI score0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•18 views

WordPress plugin Web Directory Free SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.1AI score0.00356EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/24 1:47 p.m.•98 views

CVE-2025-30604

CVE-2025-30604 affects JiangQie Official Website Mini Program (ZhuiGe Official Website Mini Program in EUVD context). Reported as an SQL Injection vulnerability (blind SQLi) in the Mini Program component, with affected versions ranging up to 1.8.2. The connected EUVD entry confirms the issue is p...

7.6CVSS7.3AI score0.00445EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•18 views

WordPress plugin JiangQie Official Website Mini Program SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

7.6CVSS8.9AI score0.00445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•3 views

CVE-2025-30604: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jiangqie JiangQie Official Website Mini Program jiangqie-official-website-mini-program allows Blind SQL Injection.This issue affects JiangQie Official Website Mini Program: from n/a through = 1.8.2...

7.6CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•3 views

PT-2025-12643

Name of the Vulnerable Software and Affected Versions JiangQie Official Website Mini Program versions 1.8.2 and earlier Description The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL...

7.6CVSS0.00445EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/03/20 7:03 p.m.•31 views

CVE-2025-29980 Blind SQL Injection vulnerability in eTRAKiT.Net

A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrary commands as the current MS SQL server account. It is recommended that the CRM feature is turned off while on eTRAKiT.net release 3.2.1.7...

9.8CVSS0.00561EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/17 10:29 p.m.•14 views

CVE-2025-27281

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cookforweb All In Menu all-in-menu allows Blind SQL Injection.This issue affects All In Menu: from n/a through = 1.1.5...

8.5CVSS7.3AI score0.00338EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/16 7:12 p.m.•43 views

CVE-2024-12245

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain...

8.7CVSS7.9AI score0.00378EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/15 9:57 p.m.•5 views

CVE-2025-27281 WordPress All In Menu Plugin <= 1.1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cookforweb All In Menu all-in-menu allows Blind SQL Injection.This issue affects All In Menu: from n/a through = 1.1.5...

8.5CVSS8.9AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/15 12:00 a.m.•3 views

PT-2025-11369

Name of the Vulnerable Software and Affected Versions: cookforweb All In Menu versions 1.1.5 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...

8.5CVSS0.00338EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/15 12:00 a.m.•4 views

CVE-2025-27281: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cookforweb All In Menu all-in-menu allows Blind SQL Injection.This issue affects All In Menu: from n/a through = 1.1.5...

8.5CVSS5.8AI score0.00338EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/03/14 6:18 p.m.•5 views

CodeZips-Hospital-Management-System

Vulnerability Title + SQL Injection in Hospital Management...

6.2AI score
SaveExploits0
NVD
NVD
•added 2025/03/14 6:15 p.m.•42 views

CVE-2024-54447

Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain...

7.1CVSS0.00325EPSS
SaveExploits0References1
Rows per page
Query Builder