CVE-2026-82911: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in the OrderConfirmController at GET /order/confirm/ordernumber in Roskus Prospero Flow CRM before 5.15.11 allows an unauthenticated attacker to confirm any order on behalf of an authenticated user by directing them to a crafted page. Laravel's VerifyCsrfToken...

CVE-2018-6372

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

CVE-2018-6372

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

CVE-2018-6372: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

CVE-2009-1843

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...

CVE-2009-1843

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...

CVE-2009-1843: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...