CVE-2025-1648

The Yawave plugin for WordPress is vulnerable to SQL Injection via the 'lbid' parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...

SQL injection vulnerability in the lbid parameter of artlist_detail.php of Jiujiang Lianchuang Network Technology Co.

Jiujiang Lianchuang Network Technology Co., Ltd. building system is a website building system. A SQL injection vulnerability exists in the lbid parameter of the artlistdetail.php page of Jiujiang Lianchuang Network Technology Co. An attacker can exploit this vulnerability to obtain sensitive...