Lucene search
+L

4 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/12 12:00 a.m.•2 views

CVE-2019-25693: Cross-Site Request Forgery (CSRF)

ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords parameter in collectionedit.php. Attackers can submit POST requests with crafted SQL payloads in the keywords field to...

7.1CVSS6.3AI score0.00159EPSS
SaveExploits1References3
exploitpack
exploitpack
•added 2019/01/28 12:00 a.m.•45 views

ResourceSpace 8.6 - collection_edit.php SQL Injection

ResourceSpace 8.6 - collectionedit.php SQL Injection Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=&copy=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...

8.6AI score
SaveExploits0
zdt
zdt
•added 2019/01/28 12:00 a.m.•63 views

ResourceSpace 8.6 - collection_edit.php SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=&copy=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/01/28 12:00 a.m.•140 views

ResourceSpace 8.6 - 'collection_edit.php' SQL Injection

Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=&copy=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...

5.3AI score
SaveExploits0
Rows per page
Query Builder