CVE-2026-2283

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blogid' parameter in all versions up to, and including, 2.1.7. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

EUVD-2026-59896

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blogid' parameter in all versions up to, and including, 2.1.7. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

CVE-2026-2283 User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blogid' parameter in all versions up to, and including, 2.1.7. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

CVE-2026-2283

The CVE concerns the WordPress plugin “User Login History.” Affected: WordPress User Login History plugin (all versions up to and including 2.1.7). Issue: SQL Injection via the blog_id parameter caused by insufficient escaping and inadequate query preparation. Context: Exploitation is limited to ...

EUVD-2022-31926

Malicious code in bioql PyPI...

CVE-2022-27423

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blogid parameter at /blog/blog.php...

E-Commerce-PHP 注入漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. An injection vulnerability exists in E-Commerce-PHP version 1.0, which stems from the blogid parameter of the file /blog-details.php that causes SQL injection...

CVE-2022-27423

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blogid parameter at /blog/blog.php...

CVE-2022-27423

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blogid parameter at /blog/blog.php...

CVE-2022-27423

CVE-2022-27423 affects Chamilo LMS v1.11.13, exposing a SQL injection vulnerability via the blog_id parameter in /blog/blog.php. Public sources in the connected set confirm an injection flaw without detailing exploit vectors. The NVD entry lists CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base ...

CVE-2022-27423

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blogid parameter at /blog/blog.php...

CVE-2010-4859

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

Sql injection

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

eXV2 Module eblog 1.2 - blog_id SQL Injection

eXV2 Module eblog 1.2 - blogid SQL Injection Powered by eXV2 eblog 1.2 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/eblog" DORK 2 : allinurl :"exoops/modules/eblog" EXPLOIT :...

eXV2 Module eblog 1.2 - 'blog_id' SQL Injection

Powered by eXV2 eblog 1.2 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/eblog" DORK 2 : allinurl :"exoops/modules/eblog" EXPLOIT :...