Lucene search
+L

1157 matches found

Cvelist
Cvelist
added 2025/10/17 2:2 p.m.13 views

CVE-2025-11903 yanyutao0402 ChanCMS update sql injection

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Th...

6.5CVSS0.00588EPSS
Exploits1References5
CVE
CVE
added 2025/10/17 2:2 p.m.17 views

CVE-2025-11903

ChanCMS up to version 3.3.2 has an SQL injection flaw in the /cms/article/update handler caused by unsafely handling the cid parameter. The vulnerability can be exploited remotely and an exploit has been published. Vendor was contacted about the disclosure but did not respond. No remediation deta...

7.2CVSS6.3AI score0.00588EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/17 2:2 p.m.14 views

CVE-2025-11902 yanyutao0402 ChanCMS findField sql injection

A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findField of the file /cms/article/findField. Performing a manipulation of the argument cid results in sql injection. The attack can be initiated remotely. The exploit is now public an...

6.5CVSS0.00588EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2025/10/17 2:2 p.m.5 views

CVE-2025-11902

A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findField of the file /cms/article/findField. Performing a manipulation of the argument cid results in sql injection. The attack can be initiated remotely. The exploit is now public an...

7.2CVSS5.4AI score0.00588EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/17 2:2 p.m.3 views

CVE-2025-11902 yanyutao0402 ChanCMS findField sql injection

A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findField of the file /cms/article/findField. Performing a manipulation of the argument cid results in sql injection. The attack can be initiated remotely. The exploit is now public an...

6.5CVSS6.4AI score0.00588EPSS
Exploits1References5
CVE
CVE
added 2025/10/17 2:2 p.m.15 views

CVE-2025-11902

ChanCMS

7.2CVSS6.4AI score0.00588EPSS
Exploits1References5Affected Software1
CNVD
CNVD
added 2025/10/15 12:0 a.m.8 views

Online Complaint Site register-complaint.php File SQL Injection Vulnerability

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cid in the file /cms/users/register-complaint.php. An attacker can exploit this...

8.8CVSS8.2AI score0.00351EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.7 views

CVE-2025-11516

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS7.1AI score0.00351EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.10 views

CVE-2025-11515

A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-complaint.php. Performing manipulation of the argument cid results in sql injection. It is possible to initiate the attack remotely. The explo...

8.8CVSS7AI score0.00351EPSS
Exploits1References1
NVD
NVD
added 2025/10/09 1:15 a.m.10 views

CVE-2025-11515

A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-complaint.php. Performing manipulation of the argument cid results in sql injection. It is possible to initiate the attack remotely. The explo...

8.8CVSS0.00351EPSS
Exploits1References5
OSV
OSV
added 2025/10/09 1:15 a.m.7 views

CVE-2025-11516

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS5.8AI score0.00351EPSS
Exploits1References5
NVD
NVD
added 2025/10/09 1:15 a.m.14 views

CVE-2025-11516

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS0.00351EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 12:32 a.m.26 views

CVE-2025-11516

CVE-2025-11516 affects code-projects Online Complaint Site 1.0, specifically the /cms/users/complaint-details.php file. The root cause is SQL injection triggered by manipulating the cid argument, enabling remote exploitation. Multiple connected sources corroborate that an attacker can remotely ex...

8.8CVSS6.4AI score0.00351EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/09 12:2 a.m.15 views

CVE-2025-11515

Affected software: code-projects Online Complaint Site 1.0. Vulnerable component/function: the file /cms/users/register-complaint.php, where manipulation of the cid parameter leads to an SQL injection. Root cause / impact (as stated): lack of input validation in cid allows remote attacker to inje...

8.8CVSS6.4AI score0.00351EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.6 views

Code-Projects Online Complaint Site SQL注入漏洞

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cid in the file /cms/users/register-complaint.php. An attacker can exploit this...

8.8CVSS8.1AI score0.00351EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.10 views

PT-2025-41323

Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A security flaw exists in code-projects Online Complaint Site version 1.0. The issue involves SQL injection due to manipulation of the cid argument when processing the file...

8.8CVSS6.5AI score0.00351EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.8 views

PT-2025-41324

Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A flaw exists in code-projects Online Complaint Site 1.0. The issue is related to the manipulation of the cid argument, which can lead to SQL injection. This can be exploited remotely...

8.8CVSS6.2AI score0.00351EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2008-5534

Malware in sbrugna...

7.5CVSS6.4AI score0.01042EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2009-0431

Malware in sbrugna...

7.5CVSS6.4AI score0.01185EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-0914

Malware in sbrugna...

7.5CVSS6.4AI score0.0095EPSS
Exploits1References3
Rows per page
Query Builder