EUVD-2025-11353

Malicious code in bioql PyPI...

EUVD-2025-3060

Malicious code in bioql PyPI...

CVE-2025-22976

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

CVE-2025-28100

The dingfanzuCMS v.1.0 software contains a SQL Injection vulnerability (CWE-89) caused by insufficient filtering of the id parameter within the operateOrder.php endpoint. An attacker can exploit this flaw to inject malicious SQL code, which may lead to unauthorized database access , control of th...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

PT-2025-16372 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzuCMS version 1.0 Description: A SQL Injection issue allows an attacker to execute arbitrary code due to improper filtering of content at the "operateOrder.php" id parameter. This enables the attacker to inject malicious SQL code,...

CVE-2025-28100: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

CVE-2025-22976

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...

CVE-2025-22976

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...

CVE-2025-22976

A SQL Injection vulnerability exists in dingfanzuCMS v.1.0 , a PHP-based takeaway ordering website. The root cause is the application's failure to properly filter or validate externally entered SQL statements within the checkOrder.php module, specifically the shopId parameter. A local attacker ca...

CVE-2025-22976

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...

PT-2025-4754 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzuCMS version 1.0 Description: The issue allows a local attacker to execute arbitrary code due to incorrect filtering of content at the checkOrder.php shopId module. This enables the attacker to perform SQL injection attacks...

CVE-2025-22976: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...