EUVD-2023-37714

Malicious code in bioql PyPI...

PT-2025-11466

Name of the Vulnerable Software and Affected Versions IcProgress Innovación y Cualificación plugin affected versions not specified Description The issue allows an attacker to obtain, update, and delete data from the database by injecting an SQL query on the parameters user, id, idGroup, start dat...

Sql injection

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php...

CVE-2023-33557: Improper Neutralization of Special Elements used in an SQL Command

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php...

CVE-2023-33557

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php...

CVE-2023-33557

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php...

CVE-2023-33557

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php...

PHP Object Injection

intelliants/subrion is vulnerable to PHP object injection. The vulnerability exists through the serialized data in the subpages value within admin/blocks.php to block/edit...

CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

CVE-2020-12469: Deserialization of Untrusted Data

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

Directory traversal

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...

CVE-2008-6884: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter to 1 blocks.php and 2 main.php in xoopslib/modules/protector/...

CVE-2006-4874: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the 1 languageAdmin name and 2 languageAdmin back parameters in a modules/blocks.php; the 3 languageRegister title and 4 languageRegister title2 parameters in b...