Lucene search
+L

4242 matches found

NVD
NVD
added 2026/01/27 4:16 p.m.10 views

CVE-2020-36951

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to...

8.8CVSS0.00297EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/27 3:23 p.m.5 views

CVE-2020-36951

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to...

8.8CVSS5.9AI score0.00297EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/27 3:23 p.m.6 views

CVE-2020-36951 Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to...

8.8CVSS5.9AI score0.00297EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.8 views

CVE-2026-24572

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.2.0...

8.5CVSS5.9AI score0.00327EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.9 views

CVE-2025-49055

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through = 2.5...

9.3CVSS5.6AI score0.00372EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.10 views

CVE-2025-68999

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through = 3.20.4...

8.5CVSS5.6AI score0.00253EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.8 views

CVE-2026-24367

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.8...

8.5CVSS5.6AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.9 views

CVE-2026-24572

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.2.0...

8.5CVSS0.00327EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.4 views

CVE-2026-24624

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through = 1.0...

7.2CVSS5.9AI score0.00309EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.54 views

CVE-2026-24624 WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through = 1.0...

7.6CVSS0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:28 p.m.35 views

CVE-2026-24572 WordPress Nelio Content plugin <= 4.2.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.2.0...

8.5CVSS0.00327EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.5 views

CVE-2026-24572

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.1.0...

8.8CVSS5.9AI score0.00327EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/22 5:34 p.m.7 views

CVE-2021-47872

SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'ordercol' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by...

7.1CVSS5.8AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.10 views

CVE-2026-24367

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.8...

8.5CVSS0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.29 views

CVE-2026-22470

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FireStorm Plugins FireStorm Professional Real Estate fs-real-estate-plugin allows Blind SQL Injection.This issue affects FireStorm Professional Real Estate: from n/a through = 2.7.11...

7.6CVSS0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.10 views

CVE-2025-68999

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through = 3.20.4...

8.5CVSS0.00253EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.5 views

CVE-2026-24367 WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.8...

8.5CVSS5.6AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.24 views

CVE-2026-24367 WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.8...

8.5CVSS0.00209EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.20 views

CVE-2026-22470

The CVE-2026-22470 entry concerns the FireStorm Real Estate Plugin for WordPress (FireStorm Professional Real Estate) and describes an authenticated SQL Injection affecting the plugin version range from n/a up to and including 2.7.11. Multiple sources (NVD, Red Hat, CIRCL, and CVE list) corrobora...

7.6CVSS5.6AI score0.00279EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.38 views

CVE-2026-22470 WordPress FireStorm Professional Real Estate plugin <= 2.7.11 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FireStorm Plugins FireStorm Professional Real Estate fs-real-estate-plugin allows Blind SQL Injection.This issue affects FireStorm Professional Real Estate: from n/a through = 2.7.11...

7.6CVSS0.00279EPSS
SaveExploits0References1
Rows per page
Query Builder