Lucene search
K

14 matches found

Vulnrichment
Vulnrichment
added 2026/04/01 6:0 a.m.1 views

CVE-2026-5256 code-projects Simple Laundry System Parameter modify.php sql injection

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.8AI score0.00045EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/04/01 6:0 a.m.2 views

CVE-2026-5256

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.8AI score0.00045EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2026/03/26 8:16 a.m.2 views

CVE-2026-4849

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is...

6.1CVSS0.00056EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/26 7:41 a.m.30 views

CVE-2026-4849 code-projects Simple Laundry System Parameter modify.php cross site scripting

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is...

5.3CVSS0.00056EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/26 7:41 a.m.0 views

CVE-2026-4849 code-projects Simple Laundry System Parameter modify.php cross site scripting

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is...

5.3CVSS4.2AI score0.00056EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-10050

Malware in sbrugna...

8.8CVSS8.7AI score0.00487EPSS
Exploits1References2
NVD
NVD
added 2021/08/30 6:15 p.m.10 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.8CVSS0.00487EPSS
Exploits1References1
Prion
Prion
added 2021/08/30 6:15 p.m.12 views

Design/Logic Flaw

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

6.5CVSS8.4AI score0.00487EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/30 4:4 p.m.10 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.5AI score0.00487EPSS
Exploits1References1
NVD
NVD
added 2020/01/28 8:15 p.m.11 views

CVE-2015-5483

Multiple cross-site request forgery CSRF vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add users, 2 delete posts, or 3 modify PHP files via unspecified vectors, or 4 conduct cross-site...

8.8CVSS8.7AI score0.00192EPSS
Exploits3References3
Cvelist
Cvelist
added 2020/01/28 7:9 p.m.12 views

CVE-2015-5483

Multiple cross-site request forgery CSRF vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add users, 2 delete posts, or 3 modify PHP files via unspecified vectors, or 4 conduct cross-site...

8.8AI score0.00192EPSS
Exploits3References3
ATTACKERKB
ATTACKERKB
added 2007/04/11 10:19 a.m.1 views

CVE-2007-1969

Cross-site scripting XSS vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS5.7AI score0.00297EPSS
Exploits0References3
NVD
NVD
added 2006/07/27 1:4 a.m.7 views

CVE-2006-3884

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 offset and 2 limit parameters, 3 newdays parameter in a new action, and the 4 linkid parameter in a deadlink action. NOTE: this issue can also be used...

7.5CVSS8.6AI score0.02389EPSS
Exploits1References9
Cvelist
Cvelist
added 2006/07/27 12:0 a.m.15 views

CVE-2006-3884

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 offset and 2 limit parameters, 3 newdays parameter in a new action, and the 4 linkid parameter in a deadlink action. NOTE: this issue can also be used...

8.6AI score0.02389EPSS
Exploits1References9
Rows per page
Query Builder