Lucene search
K

15 matches found

CNNVD
CNNVD
added 2025/11/08 12:0 a.m.2 views

WordPress plugin Groups 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00034EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-9170

Malware in sbrugna...

7.5CVSS6.4AI score0.00943EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-3620

Malware in sbrugna...

7.5CVSS6.4AI score0.00154EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-1022

Malware in sbrugna...

7.5CVSS6.2AI score0.0042EPSS
Exploits3References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-4253

Malware in sbrugna...

7.5CVSS6.1AI score0.04791EPSS
Exploits8References11
OSV
OSV
added 2025/09/17 4:15 p.m.0 views

CVE-2025-10598

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/searchproduct.php. Such manipulation of the argument groupid leads to sql injection. The attack may be launched remotely. The exploit is publicly...

9.8CVSS5.8AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/09/17 4:2 p.m.1 views

CVE-2025-10598 SourceCodester Pet Grooming Management Software search_product.php sql injection

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/searchproduct.php. Such manipulation of the argument groupid leads to sql injection. The attack may be launched remotely. The exploit is publicly...

7.5CVSS6.9AI score0.0006EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 1:44 p.m.2 views

CVE-2014-9345

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...

7.5CVSS8.8AI score0.00943EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/02/22 12:0 a.m.1 views

FUEL CMS Security Vulnerability

FUEL CMS is a content management system CMS based on the Codelgniter framework. A security vulnerability exists in FUEL CMS version 1.5.2, which stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited to execute arbitrary code via the groupid parameter...

5.4CVSS6.6AI score0.00071EPSS
Exploits1References2
NVD
NVD
added 2021/02/01 4:15 p.m.13 views

CVE-2020-13563

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

9.6CVSS6.5AI score0.42088EPSS
Exploits1References1
Talos
Talos
added 2021/01/27 12:0 a.m.47 views

phpGACL template multiple cross-site scripting vulnerabilities

Summary Multiple cross-site scripting vulnerabilities exist in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability. Tested Versions phpGACL 3.3.7 OpenEMR 5.0.2...

9.6CVSS6.7AI score0.70976EPSS
Exploits3
Prion
Prion
added 2014/12/08 4:59 p.m.8 views

Sql injection

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...

7.5CVSS9.1AI score0.00943EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2012/02/24 1:55 p.m.13 views

CVE-2012-0999

SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

7.5CVSS8.3AI score0.0042EPSS
Exploits3References3
Prion
Prion
added 2012/02/24 1:55 p.m.16 views

Sql injection

SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

7.5CVSS9AI score0.0042EPSS
Exploits3References3Affected Software1
Prion
Prion
added 2007/04/25 4:19 p.m.14 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in the groups module or 2 the smileyid parameter in the smileys modsettings module...

4.3CVSS6.1AI score0.07763EPSS
Exploits1References9Affected Software1
Rows per page
Query Builder