Lucene search
+L

124 matches found

Kitploit
Kitploit
•added 2026/10/03 5:27 p.m.•12 views

CVE-2024-50969

CVE-2024-50969 説明 Code-projects Jonnys Liquor 1.0 の browse.php における反射型クロスサイトスクリプティング XSS の脆弱性により、リモート攻撃者が search パラメータを介して任意のウェブスクリプトまたは HTML を注入できる可能性があります。 脆弱性タイプ クロスサイトスクリプティング XSS 製品ベンダー Code-projects 影響を受ける製品コードベース:...

6.1CVSS6AI score0.00517EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/16 12:00 a.m.•2 views

CVE-2021-47955: Improper Neutralization of Input During Web Page Generation

CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file upload functionality. Attackers can upload SVG files containing embedded script tags to the browse.php endpoint, which...

5.4CVSS6AI score0.00172EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/15 7:16 p.m.•37 views

CVE-2021-47958

CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal service...

5.3CVSS0.00238EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/15 6:36 p.m.•29 views

CVE-2021-47958

CVE-2021-47958 affects CouchCMS 2.2.1 and is a server-side request forgery via SVG upload. An authenticated attacker can upload SVG files containing external entity references through the browse.php endpoint to trigger arbitrary HTTP requests from the server, enabling access to internal services ...

5.3CVSS6AI score0.00238EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/15 12:00 a.m.•2 views

CVE-2021-47958: Server-Side Request Forgery (SSRF)

CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal service...

5.3CVSS6AI score0.00238EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-0962

Malware in sbrugna...

7.5CVSS6.4AI score0.01018EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2005-2699

Malware in sbrugna...

4.3CVSS6.4AI score0.00938EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2005-2436

Malware in sbrugna...

4.3CVSS6.4AI score0.01177EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-3938

Malware in sbrugna...

7.5CVSS6.4AI score0.01011EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•33 views

EUVD-2006-1086

Malware in sbrugna...

4.3CVSS6.2AI score0.0194EPSS
SaveExploits6References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2008-1843

Malware in sbrugna...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2005-0266

Malware in sbrugna...

7.5CVSS6.4AI score0.01345EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2014-4232

Malware in sbrugna...

4.3CVSS6.4AI score0.01489EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2002-0947

Malware in sbrugna...

7.5CVSS6.4AI score0.01588EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-3404

Malware in sbrugna...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/08 9:02 p.m.•7 views

CVE-2025-7196 code-projects Jonnys Liquor browse.php sql injection

A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7.5AI score0.00454EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/08 9:02 p.m.•24 views

CVE-2025-7196 code-projects Jonnys Liquor browse.php sql injection

A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00454EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/08 12:00 a.m.•15 views

Code-Projects Jonnys Liquor 注入漏洞

jonnys Liquor is a content and management system. jonnys Liquor suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /browse.php. An attacker can exploit this vulnerability to execute illeg...

9.8CVSS8.1AI score0.00454EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•0 views

CVE-2025-7196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.5AI score0.00454EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/13 4:15 p.m.•17 views

CVE-2024-50969

A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...

6.1CVSS5.9AI score0.00517EPSS
SaveExploits0References2
Rows per page
Query Builder