Lucene search
+L

8 matches found

NVD
NVD
•added 2026/08/31 4:19 p.m.•23 views

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

8.7CVSS0.0052EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/31 3:23 p.m.•39 views

CVE-2026-75133 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

8.7CVSS0.0052EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/31 3:23 p.m.•17 views

EUVD-2026-68608

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

8.7CVSS5.9AI score0.0052EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•3 views

CVE-2026-75133: Missing Authentication for Critical Function

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

8.7CVSS5.9AI score0.0052EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:51 a.m.•21 views

CVE-2020-10106

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt...

9.8CVSS8.1AI score0.01184EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-2571

Malware in sbrugna...

9.8CVSS8.1AI score0.01184EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/06 12:00 a.m.•6 views

CVE-2020-11545: Improper Neutralization of Special Elements used in an SQL Command

Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...

9.8CVSS8.2AI score0.01597EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/03 12:00 a.m.•4 views

CVE-2006-4578: Undefined Security Weakness

export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information...

7.5CVSS5.9AI score0.01484EPSS
SaveExploits0References1
Rows per page
Query Builder