66 matches found
EUVD-2019-19776
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...
CVE-2019-25508
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...
CVE-2019-25508 Jettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...
CVE-2019-25508 Jettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...
CVE-2019-25508
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...
Jettweb Php Hazir Ilan Sitesi Scripti SQL注入漏洞
Jettweb Php Hazir Ilan Sitesi Scripti is a content management system developed by the Turkish company Jettweb. The Jettweb Php Hazir Ilan Sitesi Scripti has a SQL injection vulnerability, which stems from the kat parameter being susceptible to SQL injections. This vulnerability could allow...
PT-2026-24968
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...
CVE-2019-25458
Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can send requests to with malicious payloads in the 'il', 'kat', or 'kelime' parameters to extract...
CVE-2019-25458
Web Ofisi Firma Rehberi v1 contains an SQL injection in firmalar.html exploitable via GET parameters il, kat, and kelime. Unauthenticated attackers can manipulate queries to extract data or perform time-based blind SQLi. Documented impact includes high confidentiality risk and low integrity impac...
MiracleLinux 4 : openssl-1.0.0-20.AXS4 (AXSA:2012-14:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-14:01 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which...
Malicious code in sonic-kat-iadagh (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ce17e3ee4074fdeb15e394625ae5c9208cf2c5ce9f3c867102b4707623093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kat-igh (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7588c29a96a29012e5b08f9d2339a7078f56536c136f77f6fc29c859296ff4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kat-ih (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb9b4ee4a7047d3a50578fb0c813dc3e8af4487315de154804df6189c1488d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonec-kat-favix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a11b061c1c0126d7a376d4897c36d2d588630694a3022ad3f6a380efb8d010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184961 Malicious code in sonic-kat-iadavghafg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac73476b4a2daddfd5e23b23993906a6a7217112f6a5fa28ee48556f1806fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184742 Malicious code in one-kat-fidulafav (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7cbb0c415d1ff5ee480d2779b40fb3f9b2c6fca3a57dd0911c4f94da747bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kat-ihifafu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15143f53339bb69ea08864d554ff222ec51bde23a348b25987aa70390d82e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonec-kat-favx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000acaf97bb79d327ceeb3b7915f5276c51977b1335a385c7ea2d54cedcbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184866 Malicious code in sonec-kat-favix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a11b061c1c0126d7a376d4897c36d2d588630694a3022ad3f6a380efb8d010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in soniec-kat-faverai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077072a6a9f8f35a8b21b5dcb68a3da4c3bbb60fef2bf0535764ff92d1690f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...