CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

OSV•added 2024/05/28 8:20 p.m.•16 views

GHSA-J6CV-98JX-MRWR Mocodo vulnerable to SQL injection in `/web/generate.php`

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution RCE under certain conditions...

9.8CVSS10AI score0.02744EPSS

Exploits1References5

OSV•added 2024/05/24 9:15 p.m.•3 views

CVE-2024-35374

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution RCE under certain conditions...

9.8CVSS6.5AI score0.02744EPSS

Exploits1References2

Cvelist•added 2020/06/10 5:17 p.m.•29 views

CVE-2020-14010

The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q aka name parameter...

6.1AI score0.00934EPSS

Exploits2References1

NVD•added 2018/03/18 6:29 a.m.•17 views

CVE-2018-8770

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,...

5.3CVSS5.2AI score0.60586EPSS

Exploits5References2

OSV•added 2018/03/18 6:29 a.m.•19 views

CVE-2018-8770

5.3CVSS7.1AI score

Exploits0References2