Lucene search
+L

243 matches found

Vulnrichment
Vulnrichment
•added 2023/02/03 12:00 a.m.•8 views

CVE-2021-36503

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...

9.8AI score0.00855EPSS
SaveExploits1References1
CVE
CVE
•added 2023/02/03 12:00 a.m.•77 views

CVE-2021-36503

CVE-2021-36503 is a SQL injection vulnerability affecting native-php-cms version 1.0. The issue allows remote attackers to execute arbitrary SQL commands by supplying crafted input to the cat parameter of the /list.php endpoint. The CVSS v3.1 base score is 9.8 (CRITICAL) with Network attack vecto...

9.8CVSS9.7AI score0.00855EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/03 12:00 a.m.•9 views

CVE-2021-36503: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...

9.8CVSS6.1AI score0.00855EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/03 12:00 a.m.•21 views

Native-php-cms SQL injection vulnerability

native-php-cms is a website builder for FLi individual developers. A security vulnerability exists in version 1.0 of native-php-cms, which is caused by SQL injection and can be exploited by an attacker to run arbitrary SQL commands via the cat parameter in the /list.php file...

9.8CVSS8.8AI score0.00855EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/02/03 12:00 a.m.•18 views

PT-2023-12281 · Unknown · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: native-php-cms version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat parameter in the /list.php file, enabling attackers to inject malicious SQL code...

9.8CVSS9.8AI score0.00855EPSS
SaveExploits1References2
Mend
Mend
•added 2023/02/03 12:00 a.m.•8 views

CVE-2021-36503

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...

9.8CVSS0.00855EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/04/06 9:15 p.m.•20 views

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

9.8CVSS7.3AI score0.01437EPSS
SaveExploits1References3
NVD
NVD
•added 2022/04/06 9:15 p.m.•35 views

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

9.8CVSS0.01437EPSS
SaveExploits1References3
Prion
Prion
•added 2022/04/06 9:15 p.m.•33 views

Sql injection

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

7.5CVSS9.7AI score0.01437EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/04/06 8:55 p.m.•44 views

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

10AI score0.01437EPSS
SaveExploits1References3
CVE
CVE
•added 2022/04/06 8:55 p.m.•101 views

CVE-2022-26613

CVE-2022-26613 affects PHP-CMS v1.0, with a SQL injection vulnerability in the category parameter of categorymenu.php. The connected documents consistently describe a PHP/MySQL-based PHPCMS v1.0 vulnerability due to unsanitized input in the category parameter, enabling SQL injection. The NVD entr...

9.8CVSS9.7AI score0.01437EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/04/06 8:55 p.m.•6 views

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

9.8CVSS0.01437EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/06 12:00 a.m.•8 views

CVE-2022-26613: Improper Neutralization of Special Elements used in an SQL Command

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

9.8CVSS8.2AI score0.01437EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/06 12:00 a.m.•24 views

PHPCMS SQL Injection Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules for news, images, downloads, information, products, etc. A security vulnerability exists in PHPCMS v1.0, which stems from the category parameter in categorymenu.php. No detailed vulnerabilit...

9.8CVSS5.6AI score0.01437EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/04/06 12:00 a.m.•7 views

PT-2022-17954

Name of the Vulnerable Software and Affected Versions PHP-CMS version 1.0 Description A SQL injection issue was discovered in PHP-CMS via the category parameter in the categorymenu.php file. This allows for potential exploitation. Recommendations For PHP-CMS version 1.0, consider restricting acce...

9.8CVSS5.7AI score0.01437EPSS
SaveExploits1References8
NVD
NVD
•added 2021/11/03 6:15 p.m.•39 views

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

7.5CVSS0.00979EPSS
SaveExploits1References1
Prion
Prion
•added 2021/11/03 6:15 p.m.•21 views

Sql injection

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

5CVSS7.6AI score0.00979EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/11/03 5:57 p.m.•4 views

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

8.7CVSS0.00979EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/11/03 5:57 p.m.•28 views

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

7.6AI score0.00979EPSS
SaveExploits1References1
CVE
CVE
•added 2021/11/03 5:57 p.m.•55 views

CVE-2020-18263

CVE-2020-18263 affects PHP-CMS v1.0, with a SQL injection in the search.php component via the search parameter. This allows attackers to access sensitive database information. Root cause: input from the search parameter is not properly sanitized/validated. Impact is exposure of data; no exploitat...

7.5CVSS7.6AI score0.00979EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder