Lucene search
+L

13256 matches found

Cvelist
Cvelist
added 2026/01/02 2:02 p.m.36 views

CVE-2026-0565 code-projects Content Management System delete.php sql injection

A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

7.5CVSS0.00346EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/02 2:02 p.m.34 views

CVE-2026-0565

CVE-2026-0565 affects code-projects Content Management System 1.0. The vulnerability arises from improper handling of the del parameter in the file /admin/delete.php, enabling remote SQL injection without authentication or user interaction. Multiple sources (NVD, Red Hat, CVE feeds) describe the ...

9.8CVSS7.3AI score0.00346EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/02 12:00 a.m.9 views

PT-2026-1044

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A flaw exists in Yonyou KSOA 9.0 related to the handling of HTTP GET parameters. Specifically, manipulation of the ID parameter in the '/worksheet/del user.jsp' file can lead to SQL injection. This issue is...

7.5CVSS6.8AI score0.00498EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/01/02 12:00 a.m.11 views

WordPress plugin WPBookit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.3AI score0.00144EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/02 12:00 a.m.9 views

Yonyou KSOA SQL注入漏洞

Yonyou KSOA is an enterprise management software from China's UFIDA Yonyou company. A SQL injection vulnerability exists in Yonyou KSOA version 9.0, which stems from incorrect manipulation of the parameter ID in the file /worksheet/deluser.jsp, which could lead to a SQL injection attack...

9.8CVSS7.7AI score0.00498EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/02 12:00 a.m.10 views

Code-Projects Content Management System SQL注入漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter del in the file /admin/delete.php, which...

9.8CVSS7.1AI score0.00346EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:00 a.m.19 views

PT-2026-1066

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that involves the processing of the /admin/delete.php file. Manipulation of the del argument within this file can lead to...

7.5CVSS6.9AI score0.00346EPSS
SaveExploits1References11
NVD
NVD
added 2026/01/01 7:15 p.m.8 views

CVE-2025-15409

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

9.8CVSS0.00403EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/01 7:15 p.m.7 views

CVE-2025-15409

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/01 6:32 p.m.44 views

CVE-2025-15409 code-projects Online Guitar Store Delete_product.php sql injection

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00403EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 6:32 p.m.25 views

CVE-2025-15409

CVE-2025-15409 affects code-projects Online Guitar Store 1.0. The vulnerability is an SQL injection in /admin/Delete_product.php via manipulation of the del_pro parameter, exploitable remotely. Public disclosures exist. Impact includes potential disclosure/integrity/availability harm as per CVSS ...

9.8CVSS7.2AI score0.00403EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2026/01/01 6:32 p.m.9 views

EUVD-2026-0007

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit h...

7.5CVSS7.2AI score0.00403EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2026/01/01 6:32 p.m.5 views

CVE-2025-15409

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

9.8CVSS7.2AI score0.00403EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/01 6:32 p.m.4 views

CVE-2025-15409 code-projects Online Guitar Store Delete_product.php sql injection

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS7.2AI score0.00403EPSS
SaveExploits1References5
Snyk
Snyk
added 2026/01/01 6:28 a.m.8 views

Directory Traversal

Overview chainlit is a Build Conversational AI. Affected versions of this package are vulnerable to Directory Traversal via the updatethreadelement and deletethreadelement handlers in backend/chainlit/server.py. An authenticated attacker can read arbitrary files from the server by sending a craft...

7.1CVSS6.5AI score0.0918EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.9 views

PT-2026-27698

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the netfilter module related to the validation of open intervals within nft set rbtree. Specifically, the issue arises from the lack of a defined end...

5.5AI score0.00024EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.6 views

PT-2026-6166

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of character devices within the uacce module. Specifically, a use-after-free condition can occur during the cleanup process when...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/01/01 12:00 a.m.12 views

Code-Projects Online Guitar Store SQL注入漏洞

Code-Projects Online Guitar Store is a Code-Projects open source online guitar store. A SQL injection vulnerability exists in Code-Projects Online Guitar Store version 1.0, which stems from an incorrect operation of the parameter delpro in the file /admin/Deleteproduct.php, which could lead to SQ...

9.8CVSS7.8AI score0.00403EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-4672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the inet6 addr del function. This flaw is related to the handling of temporary addresses, where a memory area is accessed after it...

7.8CVSS5.7AI score0.00182EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.10 views

PT-2026-1019

Name of the Vulnerable Software and Affected Versions code-projects Online Guitar Store version 1.0 Description A flaw exists in code-projects Online Guitar Store 1.0 that allows for SQL injection. This occurs through manipulation of the del pro argument within the /admin/Delete product.php file...

9.8CVSS7AI score0.00403EPSS
SaveExploits1References10
Rows per page
Query Builder