Lucene search
+L

10 matches found

Kitploit
Kitploit
•added 2026/09/19 3:07 p.m.•8 views

CVE-2024-50971

CVE-2024-50971 説明 Itsourcecode Construction Management System 1.0 の print.php における SQL インジェクションの脆弱性により、リモート攻撃者が mapid パラメータを介して任意の SQL コマンドを実行できる可能性があります。 脆弱性タイプ SQL インジェクション 製品ベンダー Itsourcecode 影響を受ける製品コードベース:...

7.2CVSS5.9AI score0.00742EPSS
SaveExploits0
NVD
NVD
•added 2024/11/13 4:15 p.m.•56 views

CVE-2024-50971

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...

7.2CVSS0.00742EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•0 views

CVE-2024-50971: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...

7.2CVSS6.3AI score0.00742EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/19 11:15 p.m.•30 views

CVE-2024-7935

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file print.php. The manipulation of the argument mapid leads to sql injection. The attack may be launched remotely. The explo...

9.8CVSS5.8AI score0.00484EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/19 12:00 a.m.•0 views

CVE-2024-7935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file print.php. The manipulation of the argument mapid leads to sql injection. The attack may be launched remotely. The explo...

9.8CVSS6.4AI score0.00484EPSS
SaveExploits1References1
CNVD
CNVD
•added 2017/12/29 12:00 a.m.•17 views

WordPress Easy2Map plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site. easy2Map is one of the support to create a customized Google Maps plugin. A cross-site scripting vulnerability...

6.1CVSS5.9AI score0.02083EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2017/12/27 7:00 p.m.•34 views

CVE-2015-7668

Cross-site scripting XSS vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter...

6.1AI score0.02083EPSS
SaveExploits2References3
OSV
OSV
•added 2017/12/19 8:29 p.m.•11 views

CVE-2017-17744

A cross-site scripting XSS vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter to view/advancedsettings.php...

6.1CVSS5.8AI score0.00938EPSS
SaveExploits3References2
Prion
Prion
•added 2017/12/19 8:29 p.m.•28 views

Cross site scripting

A cross-site scripting XSS vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mapid parameter to view/advancedsettings.php...

4.3CVSS6AI score0.00938EPSS
SaveExploits3References2Affected Software1
CNVD
CNVD
•added 2015/07/10 12:00 a.m.•15 views

WordPress Easy2Map plugin directory traversal vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. easy2Map is one of the plug-ins to support the creation of customized Google maps . A directory traversal...

5CVSS6.9AI score0.105EPSS
SaveExploits4References1
Rows per page
Query Builder