Lucene search
+L

6 matches found

NVD
NVD
added 2026/07/23 5:16 p.m.13 views

CVE-2026-65761

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

9.3CVSS0.00237EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2026/07/23 4:38 p.m.8 views

CVE-2026-65761 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

9.3CVSS5.7AI score0.00237EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2026/07/23 4:38 p.m.38 views

CVE-2026-65761 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

9.3CVSS0.00237EPSS
SaveExploits2References2
GithubExploit
GithubExploit
added 2026/06/10 12:33 p.m.108 views

Exploit for SQL Injection in Glpi-Project Glpi

CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulner...

9.8CVSS8AI score0.47836EPSS
SaveExploits1
EUVD
EUVD
added 2026/05/27 7:53 a.m.24 views

EUVD-2026-32158

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...

7CVSS6AI score0.00295EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/24 6:27 p.m.36 views

CVE-2026-41327 Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field

Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every piece of data in the database. This affects Dgraph's default configuration where ACL is not enabled. The attack is a...

9.1CVSS0.005EPSS
SaveExploits1References2
Rows per page
Query Builder