Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-1844

Malware in sbrugna...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References7
OSV
OSV
•added 2025/06/13 3:15 a.m.•15 views

CVE-2025-5950

The IndieBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘kind’ parameter in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

5.4CVSS5.9AI score0.00248EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/06/13 1:47 a.m.•6 views

CVE-2025-5950 IndieBlocks <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via kind Parameter

The IndieBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘kind’ parameter in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS5.9AI score0.00248EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•1 views

CVE-2025-5950: Improper Neutralization of Input During Web Page Generation

The IndieBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘kind’ parameter in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS6AI score0.00248EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/08/25 12:00 a.m.•11 views

SQL Injection Vulnerability in Nine to Five Network Website Building System

Ninety-five Network Building System is a general-purpose CMS system. The product has SQL injection vulnerability, vulnerability URL: http://target/News.asp?newskind= The vulnerability parameter is newskind , type is GET injection, numeric injection, the attacker can use the vulnerability to obtai...

8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/14 12:00 a.m.•4 views

CVE-2013-2507: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...

4.3CVSS5.9AI score0.02037EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2008/05/28 3:00 p.m.•39 views

CVE-2008-2479

Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 kind parameter to fix/browse.php and the 2 account parameter to auth/00pass.php...

8.5AI score0.00949EPSS
SaveExploits3References5
Prion
Prion
•added 2008/04/16 5:05 p.m.•27 views

Sql injection

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

7.5CVSS9.1AI score0.01151EPSS
SaveExploits2References6
NVD
NVD
•added 2008/04/16 5:05 p.m.•41 views

CVE-2008-1844

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

7.5CVSS8.4AI score0.01151EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/16 12:00 a.m.•11 views

CVE-2008-1844: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References2
Rows per page
Query Builder