Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/27 4:13 a.m.7 views

CVE-2026-2356

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2 via the 'registermember' function, due to missing validation on the 'memberid' user...

5.3CVSS5.5AI score0.00187EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.11 views

PT-2026-22113

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2 via the 'register member' function, due to missing validation on the 'member id' user...

5.3CVSS5.5AI score0.00187EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.2 views

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter memberid that can lead to SQL injection...

7.2CVSS5.7AI score0.00458EPSS
Exploits1References6
CNVD
CNVD
added 2018/01/02 12:0 a.m.3 views

Muslim Matrimonial Script SQL Injection Vulnerability

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. PHP Scripts Mall Muslim Matrimonial Script has a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the view-profile.php memid parameter...

8.8CVSS8.2AI score0.00933EPSS
Exploits1References1
OSV
OSV
added 2017/12/30 4:29 a.m.3 views

CVE-2017-17983

PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...

8.8CVSS5.8AI score0.00933EPSS
Exploits1References1
OSV
OSV
added 2017/03/09 9:59 a.m.5 views

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

7.2CVSS5.8AI score0.01701EPSS
Exploits2References2
Rows per page
Query Builder