EUVD-2025-6180

Malicious code in bioql PyPI...

CVE-2022-38280

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...

CVE-2025-25426

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

CVE-2025-25426

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

CVE-2025-25426

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

CVE-2025-25426

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

CVE-2025-25426: Improper Neutralization of Special Elements used in an SQL Command

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

CVE-2025-25426

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

CVE-2025-25426

The yshopmall mall system, developed by individual developer guchengwuyue, is vulnerable to SQL Injection in its image listing interface . This vulnerability affects versions prior to 1.9.0 . The issue stems from improper neutralization of special elements used in an SQL command (CWE-89 ). To res...

CVE-2025-25426

yshopmall =v1.9.0 is vulnerable to SQL Injection in the image listing interface...

Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal

- The plugin did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector. - Path Traversal Vulnerabillity also allows listing the entire folder & image file in the system. - The below...