Lucene search
K

7 matches found

OSV
OSV
added 2026/03/04 6:16 p.m.3 views

CVE-2019-25505

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...

7.1CVSS6AI score0.00287EPSS
Exploits1References2
NVD
NVD
added 2026/03/04 6:16 p.m.12 views

CVE-2019-25505

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...

7.1CVSS0.00287EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/04 5:15 p.m.3 views

CVE-2019-25505 Tradebox 5.4 SQL Injection via symbol Parameter

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...

7.1CVSS6.1AI score0.00287EPSS
Exploits1References2
CVE
CVE
added 2026/03/04 5:15 p.m.9 views

CVE-2019-25505

CVE-2019-25505 affects Tradebox 5.4. The vulnerability is an SQL injection via the symbol parameter in the monthly_deposit endpoint, allowing authenticated attackers to manipulate database queries. Reported techniques include boolean-based blind, time-based blind, error-based, and union-based SQL...

7.1CVSS6.1AI score0.00287EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.8 views

PT-2026-22960

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthly deposit endpoint with malicious symbol values using boolean-based blind,...

7.1CVSS6.1AI score0.00287EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.6 views

PT-2025-43876

Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software versions prior to 3.1 Description A security issue exists in Bdtask Flight Booking Software. The issue involves unrestricted upload capabilities through an unknown functionality within the...

6.5CVSS6.2AI score0.00412EPSS
Exploits1References8
CNVD
CNVD
added 2020/06/18 12:0 a.m.1 views

Online Trade - Online trading and cryptocurrency investment system security breach

Online Trade - Online trading and cryptocurrency investment system is a set of online foreign exchange and currency trading system developed using the Laravel framework. A security vulnerability exists in Online Trade - Online trading and cryptocurrency investment system. A remote attacker can...

6.7AI score
Exploits0
Rows per page
Query Builder