33 matches found
EUVD-2020-11850
Malware in sbrugna...
EUVD-2018-10453
Malware in sbrugna...
EUVD-2023-59367
Malicious code in bioql PyPI...
CVE-2023-7184
A vulnerability was found in 7-card Fakabao up to 1.0build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may...
CVE-2024-30565
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...
CVE-2024-30565: Improper Control of Generation of Code
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...
CVE-2024-30565
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...
CVE-2024-30565
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...
CVE-2024-30565
SeaCMS version 12.9 is vulnerable to arbitrary code execution due to an issue in the admin notify.php endpoint. This vulnerability allows remote attackers to execute code on the target system. As a mitigation, it is recommended to disable access to the admin notify.php endpoint until a formal pat...
Sql injection
A vulnerability was found in 7-card Fakabao up to 1.0build20230805. It has been declared as critical. This vulnerability affects unknown code of the file member/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2023-7186
CVE-2023-7186 affects 7-card Fakabao up to version 1.0_build20230805, with a vulnerability in member/notify.php. The issue arises from improper handling of the out_trade_no argument, enabling SQL injection. Multiple sources (NVD/NVD-enriched records and related feeds) confirm this is a public, di...
CVE-2023-7186 7-card Fakabao notify.php sql injection
A vulnerability was found in 7-card Fakabao up to 1.0build20230805. It has been declared as critical. This vulnerability affects unknown code of the file member/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2023-7184
A vulnerability was found in 7-card Fakabao up to 1.0build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may...
Sql injection
A vulnerability was found in 7-card Fakabao up to 1.0build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may...
CVE-2023-7184 7-card Fakabao notify.php sql injection
A vulnerability was found in 7-card Fakabao up to 1.0build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may...
CVE-2023-7184
CVE-2023-7184 affects 7-card Fakabao up to 1.0_build20230805 with a SQL injection in shop/notify.php via the out_trade_no parameter. Exploitation has been disclosed publicly. The connected sources confirm the vulnerable file and argument, but do not provide a confirmed patch version. Practical im...
CVE-2023-7184: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in 7-card Fakabao up to 1.0build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may...
CVE-2023-7186: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in 7-card Fakabao up to 1.0build20230805. It has been declared as critical. This vulnerability affects unknown code of the file member/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be...