Lucene search
+L

356 matches found

NVD
NVD
added 2022/05/18 6:15 p.m.21 views

CVE-2022-25617

Reflected Cross-Site Scripting XSS vulnerability in Code Snippets plugin = 2.14.3 at WordPress via &orderby vulnerable parameter...

6.1CVSS0.00774EPSS
Exploits0References2
Prion
Prion
added 2022/05/18 6:15 p.m.14 views

Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in Code Snippets plugin = 2.14.3 at WordPress via &orderby vulnerable parameter...

4.3CVSS6.1AI score0.00774EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/18 5:21 p.m.32 views

CVE-2022-25617 WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability in Code Snippets plugin = 2.14.3 at WordPress via &orderby vulnerable parameter...

4.7CVSS6.2AI score0.00774EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 1:17 p.m.5 views

CVE-2022-25617

Reflected Cross-Site Scripting XSS vulnerability in Code Snippets plugin = 2.14.3 at WordPress via vulnerable parameter...

6.1CVSS6.1AI score0.00774EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/05/18 12:0 a.m.9 views

WordPress plugin Code Snippets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Code Snippets plugin cross-site scripting vulnerability, which originates from the &orderby paramet...

6.1CVSS5.3AI score0.00774EPSS
Exploits0References4
CNVD
CNVD
added 2022/05/13 12:0 a.m.19 views

MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-72199)

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. SQL injection vulnerability exists in Mingsoft MCMS version 5.2.7, which can be exploited by attackers to conduct SQL injection attacks in the /mdiy/dict/list URI via the orderBy parameter...

7.5CVSS5.1AI score0.01455EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/05/13 12:0 a.m.38 views

MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-72200)

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. version 5.2.7 of Mingsoft MCMS is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks in /mdiy/dict/listExcludeApp URI via the orderBy parameter...

7.5CVSS5AI score0.01455EPSS
Exploits1Affected Software1
NVD
NVD
added 2022/05/11 6:15 p.m.13 views

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

9.8CVSS0.01455EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/11 6:15 p.m.2 views

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

9.8CVSS6AI score0.01455EPSS
Exploits1References2
Prion
Prion
added 2022/05/11 6:15 p.m.20 views

Sql injection

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

7.5CVSS9.7AI score0.01455EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/11 5:38 p.m.21 views

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

10AI score0.01455EPSS
Exploits1References1
CVE
CVE
added 2022/05/11 5:38 p.m.78 views

CVE-2022-30048

CVE-2022-30048 affects Mingsoft MCMS 5.2.7 and is a SQL injection vulnerability in the /mdiy/dict/list endpoint exploited through the orderBy parameter. Root cause: unvalidated input leading to SQL injection; impact includes potential data exposure or modification as indicated by CVSS metrics (CV...

9.8CVSS9.8AI score0.01455EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/11 5:36 p.m.26 views

CVE-2022-30047

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter...

10AI score0.01455EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/05/11 12:0 a.m.6 views

MingSoft MCMS SQL注入漏洞

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. version 5.2.7 of Mingsoft MCMS is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks in /mdiy/dict/listExcludeApp URI via the orderBy parameter...

9.8CVSS8.6AI score0.01455EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/11 12:0 a.m.8 views

MingSoft MCMS SQL注入漏洞

MingSoft MCMS is a J2ee system from MingSoft, a Chinese company. SQL injection vulnerability exists in Mingsoft MCMS version 5.2.7, which can be exploited by attackers to conduct SQL injection attacks in the /mdiy/dict/list URI via the orderBy parameter...

9.8CVSS8.6AI score0.01455EPSS
Exploits1References2
CNVD
CNVD
added 2022/05/09 12:0 a.m.36 views

Mybatis-PageHelper SQL Injection Vulnerability

Mybatis-PageHelper is a paging plug-in. An SQL injection vulnerability exists in Mybatis-PageHelper versions 1.0 inclusive through 5.3.0 inclusive, which stems from the orderBy parameter's lack of validation for external input SQL statements. An attacker could use this vulnerability to execute...

7.5CVSS6.2AI score0.01704EPSS
Exploits1Affected Software1
OSV
OSV
added 2022/05/05 12:0 a.m.54 views

GHSA-W559-623P-VFG8 MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter

MyBatis PageHelper versions 3.5.x through 5.3.x were discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

9.8CVSS7.2AI score0.01704EPSS
Exploits2References8
NVD
NVD
added 2022/05/04 1:15 p.m.26 views

CVE-2022-28111

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

9.8CVSS0.01704EPSS
Exploits1References6
Prion
Prion
added 2022/05/04 1:15 p.m.24 views

Sql injection

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

7.5CVSS9.8AI score0.01704EPSS
Exploits2References6Affected Software1
Cvelist
Cvelist
added 2022/05/04 12:0 a.m.41 views

CVE-2022-28111

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

10AI score0.01704EPSS
Exploits1References6
Rows per page
Query Builder