Lucene search
+L

9269 matches found

NVD
NVD
•added 2026/04/08 9:17 p.m.•18 views

CVE-2026-5805

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

7.5CVSS0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/08 9:15 p.m.•33 views

CVE-2026-5806

CVE-2026-5806 affects code-projects’ Easy Blog Site 1.0. The vulnerability is a Cross-Site Scripting (XSS) in the /posts/update.php function, via manipulation of the postTitle parameter. Impact per documents is limited to non-persistent integrity disruption with no confidentiality or availability...

5.1CVSS3.7AI score0.00331EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/08 9:15 p.m.•10 views

CVE-2026-5806

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly a...

5.1CVSS3.7AI score0.00331EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/08 9:15 p.m.•47 views

CVE-2026-5806 code-projects Easy Blog Site update.php cross site scripting

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly a...

5.1CVSS0.00331EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 p.m.•9 views

CVE-2026-5805 code-projects Easy Blog Site contact_us.php sql injection

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/08 8:30 p.m.•33 views

CVE-2026-5805

Code-projects Easy Blog Site (up to version 1.0) contains a SQL injection in /users/contact_us.php where manipulating the Name parameter can trigger database queries remotely. The vulnerability’s exploitability is network-based with low impact on confidentiality, integrity, and availability, and ...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/08 8:30 p.m.•9 views

CVE-2026-5805

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•32 views

PT-2026-31454

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contact us.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made availabl...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•5 views

CVE-2026-5806: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly a...

5.1CVSS3.7AI score0.00331EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•5 views

CVE-2026-5805: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•18 views

PT-2026-31474

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly a...

5.1CVSS4.2AI score0.00331EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/04/07 10:52 a.m.•20 views

CVE-2026-5646

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/06 12:32 p.m.•17 views

EUVD-2026-19223

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/06 11:17 a.m.•21 views

CVE-2026-5646

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/06 10:30 a.m.•12 views

CVE-2026-5646 code-projects Easy Blog Site login.php sql injection

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/06 10:30 a.m.•53 views

CVE-2026-5646 code-projects Easy Blog Site login.php sql injection

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/06 10:30 a.m.•33 views

CVE-2026-5646

Vulnerability CVE-2026-5646 affects code-projects Easy Blog Site 1.0, specifically the login.php file. The issue arises from manipulating the username/password parameters, leading to a SQL injection in a function handling authentication. Attack vector is network remote, with low attack complexity...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/06 10:30 a.m.•8 views

CVE-2026-5646

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•8 views

CVE-2026-5646: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•22 views

PT-2026-30596

Name of the Vulnerable Software and Affected Versions Easy Blog Site version 1.0 Description A security issue exists in Easy Blog Site 1.0 related to the login functionality within the login.php file. Manipulation of the username and password arguments can lead to SQL injection. The attack can be...

7.5CVSS7.4AI score0.00411EPSS
SaveExploits0References12
Rows per page
Query Builder