CVE-2026-87771 Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87771 Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87771

The Product Question and Answer WordPress plugin, in versions through 1.1.0 , is vulnerable to unauthenticated SQL injection . The root cause is a failure to sanitize and escape parameters before using them in SQL queries on AJAX actions accessible to unauthenticated users. An attacker can exploi...

CVE-2025-5401

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Parameter Handler. The manipulation of the argument pid leads...

Blogbook 注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. Blogbook has an injection vulnerability that stems from SQL injection in the parameter pid in the file /post.php...

CVE-2025-5401: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Parameter Handler. The manipulation of the argument pid leads...

AeroCMS SQL注入漏洞

AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from the pid parameter of its post.php component that allows an attacker to implement a SQL injection resulting in access to database information...

CVE-2022-45331

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

CVE-2022-45331: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...

Sql injection

Adhouma CMS through 2019-10-09 has SQL Injection via the post.php pid parameter...

CVE-2019-17429

CVE-2019-17429 affects Adhouma CMS prior to or on 2019-10-09. The vulnerability is an SQL injection in the post.php p_id parameter, as described in the CVE entry and corroborated by Red Hat and NVD records. This flaw enables manipulation of database queries via the affected parameter, with potent...

CVE-2019-17429

Adhouma CMS through 2019-10-09 has SQL Injection via the post.php pid parameter...

CVE-2019-17429: Improper Neutralization of Special Elements used in an SQL Command

Adhouma CMS through 2019-10-09 has SQL Injection via the post.php pid parameter...

CVE-2018-20480

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

Sql injection

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

CVE-2018-20480

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

S-CMS SQL Injection Vulnerability (CNVD-2018-26678)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Pid' parameter to the js/pic.php file...

CVE-2018-20480: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

CVE-2010-2357

SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: some of these details are obtained from third party information...