Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•37 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

6.5CVSS5.6AI score0.00242EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/03 6:16 p.m.•25 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

6.5CVSS0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/03 12:00 a.m.•9 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

5.8AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/03 12:00 a.m.•57 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

0.00242EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/03 12:00 a.m.•13 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

5.9AI score0.00242EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/22 12:22 a.m.•34 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS8.7AI score0.00835EPSS
SaveExploits2References1
NVD
NVD
•added 2025/08/20 5:15 p.m.•21 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS0.00835EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2025/08/20 5:15 p.m.•23 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS6.3AI score0.00835EPSS
SaveExploits2References4
CVE
CVE
•added 2025/08/20 12:00 a.m.•52 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page within Online Artwork and Fine Arts MCA Project 1.0 . This flaw allows a remote attacker to inject arbitrary SQL queries, potentially resulting in database enumeration and remote code execution . To remediate...

9.8CVSS8.8AI score0.00835EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2025/08/20 12:00 a.m.•33 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

0.00835EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•9 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

8.8AI score0.00835EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•24 views

Online Artwork and Fine Arts security vulnerabilities

Online Artwork and Fine Arts is an online artwork display box selling project by the individual developer Vishal Mathur. A security vulnerability exists in Online Artwork and Fine Arts version 1.0, which stems from a SQL injection in the id2 parameter of the cancelbooking.php page, which could le...

9.8CVSS8.4AI score0.00835EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•25 views

PT-2025-34122 · Unknown · Online Artwork/Fine Arts Mca Project

Name of the Vulnerable Software and Affected Versions: Online Artwork and Fine Arts MCA Project version 1.0 Description: A SQL injection vulnerability exists in the id2 parameter of the cancel booking.php page. A remote attacker can inject arbitrary SQL queries, leading to database enumeration an...

9.8CVSS7.8AI score0.00835EPSS
SaveExploits2References8
GithubExploit
GithubExploit
•added 2025/08/19 11:01 a.m.•141 views

Exploit for CVE-2025-55444

CVE Reports by Anudeep Kadambala This repository contains det...

9.8CVSS8.9AI score0.00835EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/02 12:00 a.m.•7 views

CVE-2008-1331: Improper Input Validation

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter...

10CVSS6.3AI score0.08778EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2006/09/06 10:00 p.m.•36 views

CVE-2006-4585

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

8.4AI score0.02473EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/06 12:00 a.m.•6 views

CVE-2006-4585: Undefined Security Weakness

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

9CVSS6.5AI score0.02473EPSS
SaveExploits1References1
Rows per page
Query Builder