Lucene search
+L

3026 matches found

ATTACKERKB
ATTACKERKB
added 2025/03/04 3:15 p.m.15 views

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS5.8AI score0.00301EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/04 3:15 p.m.6 views

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS0.00301EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/04 2:16 p.m.19 views

CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS0.00301EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/04 2:16 p.m.5 views

CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

8.6CVSS5.8AI score0.00301EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/04 2:16 p.m.51 views

CVE-2024-9149

CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...

8.6CVSS5.8AI score0.00301EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.6 views

Wind Media E-Commerce Website Template SQL注入漏洞

Wind Media E-Commerce Website Template is an e-commerce template from Wind Media, Inc. A SQL injection vulnerability exists in Wind Media E-Commerce Website Template versions prior to v1.5, which stems from susceptibility to SQL injection attacks...

8.6CVSS7.9AI score0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.7 views

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions that stems from improper authorization...

8.8CVSS6.5AI score0.00507EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.8 views

zz 代码问题漏洞

zz is an e-commerce platform for zj1983 individual developers. A code issue vulnerability exists in zz 2024-8 and prior versions, which stems from unrestricted file uploads and could lead to remote code execution...

9.8CVSS7.1AI score0.0064EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.6 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-08 and prior versions, which stems from SQL injection and could lead to remote code execution...

8.8CVSS7.5AI score0.00597EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.6 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

9.8CVSS7.5AI score0.00549EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.7 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

8.8CVSS7.5AI score0.00523EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.8 views

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

9.8CVSS7.5AI score0.00549EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.5 views

Mini-Tmall 跨站脚本漏洞

Mini-Tmall is Mini-Tmall open source Spring Boot based on a comprehensive B2C e-commerce platform . Used to build an e-commerce platform to provide commodity trading services. A cross-site scripting vulnerability exists in Mini-Tmall 20250211 and previous versions. Attackers can use the...

5.4CVSS4AI score0.00361EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/02 12:0 a.m.7 views

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-08 and earlier versions, which stems from the presence of cross-site request forgery that could lead to remote code execution...

6.5CVSS5.7AI score0.00349EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/02/26 2:22 p.m.13 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/24 2:15 p.m.14 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.00274EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/02/24 2:15 p.m.5 views

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00274EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/24 1:43 p.m.7 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS5.4AI score0.00274EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/24 1:43 p.m.74 views

CVE-2025-0545

The CVE-2025-0545 vulnerability concerns Tekrom Technology’s T-Soft E-Commerce before v5, where improper neutralization of input during Web page generation enables Cross‑Site Scripting (XSS). The issue is tied to input handling in generating web pages, allowing injected scripts to run in the cont...

4.7CVSS5.4AI score0.00274EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/24 1:43 p.m.21 views

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

4.7CVSS0.00274EPSS
SaveExploits0References2
Rows per page
Query Builder