Lucene search
K

245 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-45714

CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection SSTI vulnerability exists in multiple modules of CubeCart including Email Templates, Invoices, Documents, and Contact Forms. The application unsafely evaluates user-supplied input using the...

9.1CVSS5.9AI score0.00057EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/13 8:43 p.m.8 views

CVE-2026-45714 CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE

CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection SSTI vulnerability exists in multiple modules of CubeCart including Email Templates, Invoices, Documents, and Contact Forms. The application unsafely evaluates user-supplied input using the...

9.1CVSS6.1AI score0.00057EPSS
Exploits0References1
CVE
CVE
added 2026/05/13 8:43 p.m.6 views

CVE-2026-45714

CubeCart prior to version 6.7.0 is affected by an Authenticated Server-Side Template Injection (SSTI) in multiple modules (Email Templates, Invoices, Documents, Contact Forms). The issue arises from unsafely evaluating user-supplied input with the Smarty template engine without enabling Smarty Se...

9.1CVSS6.1AI score0.00057EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/13 8:43 p.m.6 views

EUVD-2026-30176

CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection SSTI vulnerability exists in multiple modules of CubeCart including Email Templates, Invoices, Documents, and Contact Forms. The application unsafely evaluates user-supplied input using the...

9.1CVSS6.1AI score0.00057EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/07 5:33 p.m.2 views

CVE-2025-60197

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS7.1AI score0.00124EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 6:32 p.m.1 views

EUVD-2025-38118

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.2CVSS6.6AI score0.00124EPSS
Exploits0References2
NVD
NVD
added 2025/11/06 4:16 p.m.0 views

CVE-2025-60197

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS0.00124EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:54 p.m.1 views

CVE-2025-60197 WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS6.7AI score0.00124EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 3:54 p.m.4 views

CVE-2025-60197

CVE-2025-60197 refers to a Local File Inclusion in the WordPress plugin Simple Contact Forms (owner: owenr88) version &lt;= 1.6.4, caused by improper control of the filename in include/require statements. Affected product/component: WordPress plugin Simple Contact Forms; vulnerability type: PHP L...

8.1CVSS6.7AI score0.00124EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:54 p.m.5 views

CVE-2025-60197 WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS0.00124EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.1 views

WordPress plugin Simple Contact Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.7AI score0.00124EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.2 views

PT-2025-45270

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.2CVSS7.1AI score0.00124EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-11048

Malware in sbrugna...

4.8CVSS5.1AI score0.00186EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-2333

Malware in sbrugna...

3.5CVSS6.4AI score0.00273EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-2077

Malware in sbrugna...

2.1CVSS6.3AI score0.00335EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-39087

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.0027EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-19733

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00077EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-49939

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00106EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-56881

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.00498EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-38467

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.00148EPSS
Exploits0References1
Rows per page
Query Builder