Lucene search
+L

3 matches found

CNVD
CNVD
•added 2025/07/18 12:00 a.m.•13 views

Modern Bag category-list.php file SQL Injection Vulnerability

Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter idCate in file /admin/category-list.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...

9.8CVSS8.3AI score0.00509EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/12 12:00 a.m.•13 views

Code-Projects Modern Bag 注入漏洞

Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter idCate in file /admin/category-list.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...

9.8CVSS8.2AI score0.00509EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/12 12:00 a.m.•2 views

CVE-2025-7478: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. Affected is an unknown function of the file /admin/category-list.php. The manipulation of the argument idCate leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00509EPSS
SaveExploits1References1
Rows per page
Query Builder