Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:25 a.m.•10 views

CVE-2023-4407

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

9.8CVSS8.2AI score0.01987EPSS
SaveExploits4References1
OSV
OSV
•added 2025/02/14 5:15 p.m.•12 views

CVE-2025-25994

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

7.5CVSS5.9AI score0.00494EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/14 12:00 a.m.•0 views

CVE-2025-25994: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

7.5CVSS6AI score0.00494EPSS
SaveExploits1References1
OSV
OSV
•added 2023/08/18 1:15 p.m.•17 views

CVE-2023-4407

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

9.8CVSS5.8AI score0.01987EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/18 12:00 a.m.•1 views

CVE-2023-4407: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

9.8CVSS6.6AI score0.01987EPSS
SaveExploits4References2
CNVD
CNVD
•added 2017/11/01 12:00 a.m.•10 views

WordPress wp-noexternallinks plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. wp-noexternallinks plugin is one of the link conversion plugin . A cross-site scripting vulnerability exists in...

6.1CVSS6.3AI score0.00954EPSS
SaveExploits2References1
OSV
OSV
•added 2017/10/24 6:29 p.m.•8 views

CVE-2017-15863

Cross Site Scripting XSS exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php...

6.1CVSS5.8AI score0.00954EPSS
SaveExploits2References2
Rows per page
Query Builder