EUVD-2008-4185

Malware in sbrugna...

EUVD-2025-30425

Malicious code in bioql PyPI...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38220)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter idd found i...

CVE-2025-10830 Campcodes Computer Sales and Inventory System inv_edit1.php sql injection

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

CVE-2025-10830: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

PT-2025-1738 · WordPress · Woo Ukrposhta

Name of the Vulnerable Software and Affected Versions: Woo Ukrposhta plugin for WordPress versions up to and including 1.17.11 Description: The Woo Ukrposhta plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order, post, and idd parameters due to insufficient input...

WordPress plugin Woo Ukrposhta 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-12049: Improper Neutralization of Input During Web Page Generation

The Woo Ukrposhta plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'order', 'post', and 'idd' parameters in all versions up to, and including, 1.17.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2013-2041

Name of the Vulnerable Software and Affected Versions MYRE Vacation Rental Software affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the link idd parameter in a login action. This occurs in th...

PT-2012-5286

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software version 2012 Q2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the link idd parameter to "1 mobile/listings.php" or the userid parameter to "1...

Sql injection

SQL injection vulnerability in video.php in EMO Breeder Manager aka EMO Breader Manager allows remote attackers to execute arbitrary SQL commands via the idd parameter...

CVE-2009-4958: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in video.php in EMO Breeder Manager aka EMO Breader Manager allows remote attackers to execute arbitrary SQL commands via the idd parameter...

CVE-2008-4202: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action...

Gonafish LinksCaffePRO 4.5 (index.php) SQL Injection Vulnerability

No description provided by source. /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Gonafish LinksCaffePRO 4.5 index.php SQL...