Lucene search
+L

9359 matches found

Vulnrichment
Vulnrichment
added 2025/02/25 2:17 p.m.11 views

CVE-2025-26971 WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through = 5.6.5...

7.6CVSS7.3AI score0.00463EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/25 2:17 p.m.69 views

CVE-2025-26946

CVE-2025-26946 refers to a SQL injection vulnerability in the WordPress plugin WP Yelp Review Slider. Connected sources corroborate that the issue affects WP Yelp Review Slider up to version 8.1 and is exploitable by an authenticated administrator. The vulnerability is described as an SQL injecti...

7.6CVSS7.3AI score0.00456EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/25 12:00 a.m.13 views

PT-2025-7858

Name of the Vulnerable Software and Affected Versions Jürgen Müller Easy Quotes versions 1.2.2 and earlier Description The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command...

9.3CVSS7.6AI score0.00497EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/02/25 12:00 a.m.8 views

PT-2025-7873 · WordPress · Wp Multi Store Locator

Name of the Vulnerable Software and Affected Versions: WP Multi Store Locator versions 2.5.1 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which...

9.3CVSS9.8AI score0.00517EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/02/25 12:00 a.m.20 views

PT-2025-7872 · Unknown · Ays Pro Poll Maker

Name of the Vulnerable Software and Affected Versions: ays-pro Poll Maker versions through 5.6.5 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. Recommendations:...

9.8CVSS10AI score0.00463EPSS
SaveExploits0References7
NVD
NVD
added 2025/02/24 3:15 p.m.15 views

CVE-2025-27297

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in guelben Bravo Search & Replace bravo-search-and-replace allows Blind SQL Injection.This issue affects Bravo Search & Replace: from n/a through = 1.0...

7.6CVSS0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/24 2:48 p.m.23 views

CVE-2025-27297 WordPress Bravo Search & Replace Plugin <= 1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in guelben Bravo Search & Replace bravo-search-and-replace allows Blind SQL Injection.This issue affects Bravo Search & Replace: from n/a through = 1.0...

7.6CVSS0.00442EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/24 2:48 p.m.74 views

CVE-2025-27297

CVE-2025-27297 affects the WordPress Bravo Search & Replace plugin (versions

7.6CVSS7.3AI score0.00442EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2025/02/21 10:55 p.m.15 views

U.S. Dept Of Defense: Error-based blind SQL injection

An error-based blind SQL injection vulnerability was discovered at a certain location. The vulnerability was present in the sites, rods, and ous parameters. By exploiting these parameters, sensitive information could have been extracted by triggering errors returned by the database. Certain...

7.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/02/20 3:48 p.m.120 views

Exploit for SQL Injection in Eniture Ltl_Freight_Quotes

CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 5.6 AND err...

7.5CVSS7.4AI score0.00782EPSS
SaveExploits3
CNNVD
CNNVD
added 2025/02/19 12:00 a.m.9 views

ChurchCRM 安全漏洞

ChurchCRM is an open source CRM system built for churches by ChurchCRM Open Source. A security vulnerability exists in ChurchCRM 5.13.0 and earlier versions, which stems from the CurrentFundraiser parameter being directly connected to a SQL query without sufficient cleanup, which can be exploited...

9.3CVSS9.4AI score0.00744EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/19 12:00 a.m.10 views

ChurchCRM 安全漏洞

ChurchCRM is an open source CRM system built for churches by ChurchCRM Open Source. A security vulnerability exists in ChurchCRM 5.13.0 and earlier versions, which stems from the EID parameter being directly connected to a SQL query without proper cleanup, which is susceptible to SQL injection...

9.3CVSS9.3AI score0.00618EPSS
SaveExploits1References1
NVD
NVD
added 2025/02/18 8:15 p.m.14 views

CVE-2025-22639

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Techspawn Distance Rate Shipping for WooCommerce distance-rate-shipping-for-woocommerce-pro allows Blind SQL Injection.This issue affects Distance Rate Shipping for WooCommerce: from n/a through =...

8.5CVSS0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/18 7:54 p.m.73 views

CVE-2025-22639

CVE-2025-22639 pertains to the WordPress plugin Distance Rate Shipping for WooCommerce (

8.5CVSS7.3AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/16 11:15 p.m.23 views

CVE-2025-26755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through = 3.9...

7.6CVSS0.00378EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/16 10:17 p.m.107 views

CVE-2025-26755

CVE-2025-26755 concerns the WordPress plugin WP Airbnb Review Slider. The vulnerability is an SQL Injection due to improper neutralization of input in the plugin, allowing Blind SQL Injection on versions

7.6CVSS7.3AI score0.00378EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/13 5:37 p.m.18 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS6.7AI score0.00149EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/11 5:15 p.m.41 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/11 4:24 p.m.82 views

CVE-2025-22399

Dell UCC Edge 2.3.0 is affected by a Blind SSRF in the Add Customer SFTP Server component. The vulnerability allows an unauthenticated, locally located attacker to trigger server-side requests, impacting confidentiality, integrity, and availability as indicated by CVSS metrics (high impact, local...

7.9CVSS7.7AI score0.00149EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/11 4:24 p.m.7 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS7.7AI score0.00149EPSS
SaveExploits0References1
Rows per page
Query Builder