Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9614

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00387EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/05 12:29 a.m.15 views

CVE-2025-22928

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cpid parameter at /modules/messages/Inbox.php...

9.8CVSS8.6AI score0.00387EPSS
Exploits0References1
NVD
NVD
added 2025/04/03 1:15 p.m.4 views

CVE-2025-22928

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cpid parameter at /modules/messages/Inbox.php...

9.8CVSS0.00387EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/03 12:0 a.m.6 views

CVE-2025-22928

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cpid parameter at /modules/messages/Inbox.php...

7.9AI score0.00387EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.0 views

Open Solutions For Education openSIS 安全漏洞

Open Solutions For Education openSIS is an open source student information management system from Open Solutions For Education, USA. A security vulnerability exists in Open Solutions For Education openSIS versions v7.0 through v9.1, which stems from a SQL injection issue with the cpid parameter...

9.8CVSS7.5AI score0.00387EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/03 12:0 a.m.9 views

CVE-2025-22928

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cpid parameter at /modules/messages/Inbox.php...

0.00387EPSS
Exploits0References2
CVE
CVE
added 2025/04/03 12:0 a.m.41 views

CVE-2025-22928

OS4ED openSIS v7.0–v9.1 contains a SQL injection in the Inbox module (cp_id parameter at /modules/messages/Inbox.php). Root cause: lack of input sanitization allowing crafted cp_id values to affect the underlying query. Impact is indicated as high (CVSS 3.1: CRITICAL, 9.8) with potential unauthen...

9.8CVSS8.5AI score0.00387EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/08/04 12:0 a.m.1 views

LMS King Professional Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the cpid parameter in Joomla! LMS King Professional, which can be exploited by attackers to access or modify database data...

8.1AI score
Exploits0References1
Rows per page
Query Builder