Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•7 views

CVE-2025-55156: Improper Neutralization of Special Elements used in an SQL Command

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter addlinks in API /json/addpackage is vulnerable to SQL Injection. Attackers can modify or delete data in the database, causing data errors or loss. This issue has been patched ...

8.8CVSS5.8AI score0.00342EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/28 12:00 a.m.•7 views

CVE-2018-15441: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web framework code of Cisco Prime License Manager PLM could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An attacker could exploit this vulnerabilit...

9.8CVSS8.6AI score0.03652EPSS
SaveExploits0References3
Rows per page
Query Builder