Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•29 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

6.5CVSS5.6AI score0.00242EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/03 6:16 p.m.•20 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

6.5CVSS0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/03 12:00 a.m.•53 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

0.00242EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/03 12:00 a.m.•10 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

5.6AI score0.00242EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/03 12:00 a.m.•7 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

5.7AI score0.00242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 12:22 a.m.•29 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS8.7AI score0.00829EPSS
SaveExploits2References1
OSV
OSV
•added 2025/08/20 5:15 p.m.•17 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS6.3AI score0.00829EPSS
SaveExploits2References4
NVD
NVD
•added 2025/08/20 5:15 p.m.•17 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS0.00829EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2025/08/20 12:00 a.m.•28 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

0.00829EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•21 views

PT-2025-34122 · Unknown · Online Artwork/Fine Arts Mca Project

Name of the Vulnerable Software and Affected Versions: Online Artwork and Fine Arts MCA Project version 1.0 Description: A SQL injection vulnerability exists in the id2 parameter of the cancel booking.php page. A remote attacker can inject arbitrary SQL queries, leading to database enumeration an...

9.8CVSS7.8AI score0.00829EPSS
SaveExploits2References8
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•16 views

Online Artwork and Fine Arts 安全漏洞

Online Artwork and Fine Arts is an online artwork display box selling project by the individual developer Vishal Mathur. A security vulnerability exists in Online Artwork and Fine Arts version 1.0, which stems from a SQL injection in the id2 parameter of the cancelbooking.php page, which could le...

9.8CVSS8.4AI score0.00829EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•9 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

8.8AI score0.00829EPSS
SaveExploits2References4
CVE
CVE
•added 2025/08/20 12:00 a.m.•43 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page within Online Artwork and Fine Arts MCA Project 1.0 . This flaw allows a remote attacker to inject arbitrary SQL queries, potentially resulting in database enumeration and remote code execution . To remediate...

9.8CVSS8.8AI score0.00829EPSS
SaveExploits2References4Affected Software1
GithubExploit
GithubExploit
•added 2025/08/19 11:01 a.m.•135 views

Exploit for CVE-2025-55444

CVE Reports by Anudeep Kadambala This repository contains det...

9.8CVSS8.9AI score0.00829EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/02 12:00 a.m.•4 views

CVE-2008-1331: Improper Input Validation

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter...

10CVSS6.3AI score0.08778EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2006/09/06 10:00 p.m.•34 views

CVE-2006-4585

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

8.4AI score0.02427EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/06 12:00 a.m.•4 views

CVE-2006-4585: Undefined Security Weakness

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

9CVSS6.5AI score0.02427EPSS
SaveExploits1References1
Rows per page
Query Builder