Lucene search
K

6 matches found

Cvelist
Cvelist
added yesterday22 views

CVE-2016-20073 Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php

Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract...

8.8CVSS
Exploits0References4
NVD
NVD
added 2026/01/28 6:16 p.m.3 views

CVE-2020-36972

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...

8.8CVSS0.00282EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/28 5:35 p.m.2 views

CVE-2020-36972

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...

8.8CVSS5.9AI score0.00282EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 5:35 p.m.4 views

CVE-2020-36972 SmartBlog 2.0.1 - 'id_post' Blind SQL injection

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...

8.8CVSS5.9AI score0.00282EPSS
Exploits1References3
EUVD
EUVD
added 2026/01/28 5:35 p.m.5 views

EUVD-2020-30879

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...

8.8CVSS5.9AI score0.00282EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.3 views

PT-2026-5163

Name of the Vulnerable Software and Affected Versions SmartBlog version 2.0.1 Description The software contains a blind SQL injection issue in the id post parameter of the details controller. This allows attackers to extract database information by injecting crafted SQL queries that compare...

8.8CVSS5.6AI score0.00282EPSS
Exploits1References5
Rows per page
Query Builder