EUVD-2007-2315

Malware in sbrugna...

EUVD-2022-2107

Malicious code in bioql PyPI...

EUVD-2022-4997

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-14238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId...

CVE-2025-28401

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter...

CVE-2025-28401: Improper Privilege Management

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter...

PT-2025-15239 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the menuId parameter. Recommendations: For RUoYi version 4.8.0, as a temporary workaround, consider restricting access to the vulnerable...

CVE-2025-28401

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter...

CVE-2025-28401

The backend management system RUoYi version 4.8.0 is vulnerable to a privilege escalation issue. A remote attacker can exploit the menuId parameter to elevate privileges, which falls under CWE-269 (Improper Privilege Management). As of the current documentation, there is no information regarding ...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v.4.8.0, which can be exploited by a remote attacker to elevate privileges via the menuId parameter...

GHSA-34VW-8CJW-CWJJ GeniXCMS SQL Injection

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

Dolibarr SQL injection vulnerability in admin/menus/edit.php

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

Cross-Site Scripting (XSS)

genix/cms is vulnerable to cross-site scripting XSS attacks. The vulnerability exists because menuid parameter is not escaped properly, allowing the authenticated users to inject arbitrary code into it and launch XSS attacks...

CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

Sql injection

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-8377

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

CVE-2017-8377

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

CVE-2017-8377

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

CVE-2017-8377: Improper Neutralization of Special Elements used in an SQL Command

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

Papoo 2.1.2 index.php menuid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...