Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/12 10:17 p.m.3 views

CVE-2024-58301

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS8AI score0.00255EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/12 12:30 a.m.4 views

EUVD-2024-55331

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS7.4AI score0.00255EPSS
Exploits0References4
NVD
NVD
added 2025/12/11 10:15 p.m.5 views

CVE-2024-58301

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS0.00255EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/11 9:39 p.m.3 views

CVE-2024-58301 Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS7.6AI score0.00255EPSS
Exploits0References3
CVE
CVE
added 2025/12/11 9:39 p.m.7 views

CVE-2024-58301

Purei CMS 1.0 is affected by a time-based blind SQL injection via unfiltered input parameters. Exploitable endpoints include getAllParks.php and events-ajax.php, enabling an attacker to manipulate database queries and potentially extract or modify data. Root cause is a time-based blind SQL inject...

9.3CVSS7.6AI score0.00255EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/11 9:39 p.m.19 views

CVE-2024-58301 Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints

Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially...

9.3CVSS0.00255EPSS
Exploits0References3
Rows per page
Query Builder