3 matches found
PT-2026-68164
Name of the Vulnerable Software and Affected Versions Subrion CMS affected versions not specified Description The admin grid sorting helper gridGetSorting in includes/classes/ia.base.controller.admin.php fails to properly validate the sort GET parameter. While the function attempts to whitelist t...
7.2CVSS5.8AI score0.00572EPSS
SaveExploits0References5
CVE-2020-37051: Improper Neutralization of Special Elements used in an SQL Command
Online-Exam-System 2015 contains a time-based blind SQL injection vulnerability in the feedback form that allows attackers to extract database password hashes. Attackers can exploit the 'feed.php' endpoint by crafting malicious payload requests that use time delays to systematically enumerate use...
8.8CVSS5.9AI score0.00412EPSS
SaveExploits1References1
20