EUVD-2025-4145

Malicious code in bioql PyPI...

CVE-2010-4938

SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2010-2342

SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

JoomlaUX JUX Real Estate 代码注入漏洞

JoomlaUX JUX Real Estate is a Joomla component from JoomlaUX designed to meet a variety of real estate related needs. A code injection vulnerability exists in JoomlaUX JUX Real Estate version 3.4.0, which stems from the fact that incorrect manipulation of the parameters Itemid and jpyearbuilt can...

CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2024-23891

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

CVE-2024-23891

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

Cross site scripting

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

Cups Easy 跨站脚本漏洞

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the itemid parameter on the /cupseasylive/itemcreate.php page. An attacker could use th...

PT-2024-20160 · Cups Easy · Cups Easy

Name of the Vulnerable Software and Affected Versions: Cups Easy Purchase & Inventory version 1.0 Description: A vulnerability has been reported in Cups Easy Purchase & Inventory whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via...

Bangresto 1.0 - SQL Injection Vulnerability

Exploit Title: Bangresto 1.0 - SQL Injection Exploit Author: nu11secur1ty Vendor: https://axcora.com/, https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Demo: https://axcora.my.id/bangrestoapp/start.php Software: https://github.com/mesinkasir/bangresto Reference:...

Bangresto 1.0 - SQL Injection

Exploit Title: Bangresto 1.0 - SQL Injection Exploit Author: nu11secur1ty Date: 12.16.2022 Vendor: https://axcora.com/, https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Demo: https://axcora.my.id/bangrestoapp/start.php Software: https://github.com/mesinkasir/bangresto...

CVE-2022-47780

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

Sql injection

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

Bangresto SQL注入漏洞

Bangresto is a restaurant source code POS by the individual developer Mesin Kasir. A security vulnerability exists in Bangresto version 1.0 that stems from the presence of SQL injection via the itemID parameter...

CVE-2022-47780

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

Bangresta 1.0 SQL Injection

Title: Bangresto 1.0 SQLi Author: nu11secur1ty Date: 12.16.2022 Vendor: https://axcora.com/, https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Demo: https://axcora.my.id/bangrestoapp/start.php Software: https://github.com/mesinkasir/bangresto Reference:...

Joomla Component XMap SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component XMap. The flaw is due to input passed to 'index.php' via the 'view=' and 'itemID=' parameters failing to be properly filtered before being used in SQL queries. An attacker could...

Joomla com_webgrouper component 'Itemid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'Itemid' parameter of the Joomla comwebgrouper component. An attacker can exploit the vulnerability to access or modify database data...