Lucene search
+L

3 matches found

CNVD
CNVD
•added 2025/01/23 12:00 a.m.•35 views

Mysiteforme SQL Injection Vulnerability

Mysiteforme is a permission management system. A SQL injection vulnerability exists in versions of Mysiteforme prior to 2025.01.01, which stems from the lack of validation of the sname parameter in table/list for externally entered SQL statements. An attacker can exploit this vulnerability to...

7.5CVSS7.8AI score0.00448EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/09/24 1:40 a.m.•39 views

CVE-2022-39240 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph

MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround...

5.4CVSS5.7AI score0.00753EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/24 12:00 a.m.•4 views

CVE-2022-39240: Improper Neutralization of Input During Web Page Generation

MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround...

5.4CVSS6AI score0.00753EPSS
SaveExploits1References4
Rows per page
Query Builder