Lucene search
K

18 matches found

OSV
OSV
added 2026/02/24 4:15 a.m.1 views

CVE-2026-3068

A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument user2del can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

9.8CVSS5.8AI score
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/24 3:32 a.m.4 views

CVE-2026-3068

A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument user2del can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

7.5CVSS5.5AI score0.00045EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2026/02/24 3:32 a.m.5 views

EUVD-2026-7395

A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument user2del can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

9.8CVSS5.5AI score0.00045EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.3 views

itsourcecode Document Management System SQL注入漏洞

itsourcecode Document Management System is an open-source document management system developed by itsourcecode. Version 1.0 of the itsourcecode Document Management System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter “user2del” in the...

9.8CVSS7.2AI score0.00045EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.5 views

PT-2026-21661

Name of the Vulnerable Software and Affected Versions itsourcecode Document Management System version 1.0 Description A flaw exists in itsourcecode Document Management System 1.0. The issue is related to a SQL injection that can be triggered by manipulating the user2del argument in the /deluser.p...

9.8CVSS6.9AI score0.00045EPSS
Exploits1References12
EUVD
EUVD
added 2026/02/05 3:25 p.m.5 views

EUVD-2020-31050

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmcusername parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to extract sensitive database...

8.8CVSS5.6AI score0.00092EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.2 views

phpMyChat Plus SQL注入漏洞

phpMyChat Plus is a chat room system developed by Ciprianmp. Version 1.98 of phpMyChat Plus contains an SQL injection vulnerability. This vulnerability stems from the pmcusername parameter in the deluser.php page, which may lead to the exposure of sensitive database information...

8.8CVSS5.8AI score0.00092EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.5 views

PT-2026-6559

Name of the Vulnerable Software and Affected Versions phpMyChat Plus version 1.98 Description The software contains a SQL injection issue in the 'deluser.php' page. This allows manipulation of database queries through the pmc username parameter. Attackers can use boolean-based, error-based, and...

8.8CVSS5.6AI score0.00092EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-30094

Malware in sbrugna...

9.3CVSS9AI score0.01002EPSS
Exploits1References2
NVD
NVD
added 2020/02/18 7:15 p.m.8 views

CVE-2020-9265

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmcusername...

9.3CVSS8.7AI score0.01002EPSS
Exploits1References1
Prion
Prion
added 2020/02/18 7:15 p.m.8 views

Sql injection

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmcusername...

6.4CVSS8.3AI score0.01002EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2020/02/18 5:22 p.m.64 views

CVE-2020-9265

CVE-2020-9265 affects phpMyChat-Plus 1.98, where the deluser.php Delete User functionality is vulnerable to multiple SQL injections due to insufficient input validation in the database queries. The vulnerability is demonstrated by pmc_username, with CVSSv3.1/2.0 scores indicating HIGH to CRITICAL...

9.3CVSS8.3AI score0.01002EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/02/18 5:22 p.m.9 views

CVE-2020-9265

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmcusername...

9.3CVSS8.4AI score0.01002EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2020/02/14 12:0 a.m.82 views

phpMyChat Plus 1.98 SQL Injection

Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested on Windows 10/Kali Rolling The phpMyCh...

0.1AI score
Exploits0
exploitpack
exploitpack
added 2020/02/14 12:0 a.m.32 views

phpMyChat Plus 1.98 - pmc_username SQL Injection

phpMyChat Plus 1.98 - pmcusername SQL Injection Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1....

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2020/02/14 12:0 a.m.325 views

phpMyChat Plus 1.98 - 'pmc_username' SQL Injection

Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested on Windows 10/Kali Rolling The phpMyCh...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.8 views

myBloggie 2.1.2/2.1.3 deluser.php 'id' Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

7.1AI score
Exploits0
NVD
NVD
added 2005/12/14 11:3 a.m.9 views

CVE-2005-4225

Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via 1 the category parameter in add.php, 2 the catdesc parameter in addcat.php, 3 the level and user parameters in adduser.php, 4 the postid parameter in...

7.5CVSS8.2AI score0.02117EPSS
Exploits0References17
Rows per page
Query Builder