CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2025/12/02 8:15 p.m.•4 views

CVE-2025-65877

Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 2025-09-22 is vulnerable to SQL injection via the 'title' parameter in com.wanli.lvzhoucms.service.ContentServicefindPage. The parameter is concatenated directly into a dynamic SQL query without sanitization or prepared statements,...

7.5CVSS5.8AI score

Exploits0References1

CVE•added 2025/12/02 12:0 a.m.•10 views

CVE-2025-65877

Lvzhou CMS prior to commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 is vulnerable to SQL injection via the title parameter in com.wanli.lvzhoucms.service.ContentService#findPage. The input is concatenated into a dynamic SQL query without sanitization or prepared statements, enabling reading of se...

7.5CVSS7.4AI score0.00042EPSS

Exploits1References1Affected Software1

Cvelist•added 2025/12/02 12:0 a.m.•5 views

CVE-2025-65877

0.00042EPSS

Exploits1References1

Positive Technologies•added 2025/12/02 12:0 a.m.•4 views

PT-2025-48773

Name of the Vulnerable Software and Affected Versions Lvzhou CMS versions prior to commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 2025-09-22 Description The software contains a SQL injection flaw due to unsanitized input. Specifically, the title parameter within the...

7.5CVSS7.5AI score0.00042EPSS

Exploits1References6