Lucene search
K

37 matches found

Nuclei
Nuclei
added 16 hours ago46 views

PHPJabbers Food Delivery Script v3.0 - SQL Injection

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. id: CVE-2023-40749 info: name: PHPJabbers Food Delivery Script v3.0 - SQL Injection author: ritikchaddha severity: critical description: | PHPJabbers Food Delivery Script v3.0 is vulnerable...

9.8CVSS7.4AI score0.47274EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/01/25 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

9.8CVSS5.9AI score0.47274EPSS
In wildExploits0References53
RedhatCVE
RedhatCVE
added 2026/01/21 9:26 p.m.4 views

CVE-2026-21664

HackerOne community member Huynh Pham Thanh Luc nigh7c0r3 has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent ...

6.1CVSS5.5AI score0.0005EPSS
Exploits0References1
NVD
NVD
added 2026/01/20 9:16 p.m.2 views

CVE-2026-21664

HackerOne community member Huynh Pham Thanh Luc nigh7c0r3 has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent ...

6.1CVSS0.0005EPSS
Exploits0References1
CVE
CVE
added 2026/01/20 8:48 p.m.7 views

CVE-2026-21664

CVE-2026-21664 is a reported reflected XSS vulnerability affecting Revive Adserver’s afr.php delivery script. A crafted URL containing HTML payload parameters can cause an administrator visiting the link to have malicious scripts executed in the browser. The available sources consistently describ...

6.1CVSS5.5AI score0.0005EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/20 8:48 p.m.11 views

CVE-2026-21664

HackerOne community member Huynh Pham Thanh Luc nigh7c0r3 has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent ...

6.1CVSS0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:29 p.m.6 views

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

9.8CVSS7AI score0.00123EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:29 p.m.7 views

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

9.8CVSS7.8AI score0.47274EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 10:25 a.m.5 views

CVE-2025-9027

A vulnerability has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /addelivery.php. The manipulation of the argument deName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

9.8CVSS7.8AI score0.00072EPSS
Exploits1References1
OSV
OSV
added 2025/08/15 10:15 a.m.0 views

CVE-2025-9027

A vulnerability has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /addelivery.php. The manipulation of the argument deName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

9.8CVSS5.8AI score
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:14 a.m.6 views

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS8AI score0.47274EPSS
Exploits0
NVD
NVD
added 2023/08/28 1:15 p.m.8 views

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

9.8CVSS9.4AI score0.00123EPSS
Exploits0References2
OSV
OSV
added 2023/08/28 1:15 p.m.0 views

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

9.8CVSS5.7AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 1:15 p.m.0 views

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

9.8CVSS7.3AI score0.00123EPSS
Exploits0References4
OSV
OSV
added 2023/08/28 1:15 p.m.0 views

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

9.8CVSS5.8AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 1:15 p.m.2 views

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS7.5AI score0.47274EPSS
Exploits0References5
OSV
OSV
added 2023/08/28 1:15 p.m.1 views

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS5.8AI score0.47274EPSS
Exploits0References2
NVD
NVD
added 2023/08/28 1:15 p.m.11 views

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

9.8CVSS9.8AI score0.47274EPSS
Exploits0References2
NVD
NVD
added 2023/08/28 1:15 p.m.10 views

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

9.8CVSS9.8AI score0.47274EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 1:15 p.m.0 views

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

9.8CVSS7.4AI score0.47274EPSS
Exploits0References5
Rows per page
Query Builder