Lucene search
+L

50 matches found

NVD
NVD
added 2026/08/31 4:17 a.m.14 views

CVE-2026-82612

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/31 3:45 a.m.46 views

CVE-2026-82612 itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 3:45 a.m.19 views

CVE-2026-82612

itsourcecode Online Medicine Delivery System 1.0 is vulnerable to SQL injection in the loadResultList function within the file /index.php?q=single-item (Product Detail Page). The injection is triggered by manipulating the ID argument , and the attack is remote and unauthenticated . The exploit ha...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/18 9:01 p.m.28 views

CVE-2026-70821

...

8.8CVSS0.00402EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/23 7:25 p.m.11 views

CVE-2019-25440

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS5.7AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/22 2:16 p.m.12 views

CVE-2019-25440

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS0.00232EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/22 1:34 p.m.6 views

CVE-2019-25440 WebIncorp ERP Every version SQL Injection via product_detail.php

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS5.7AI score0.00232EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/22 1:34 p.m.36 views

CVE-2019-25440 WebIncorp ERP Every version SQL Injection via product_detail.php

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS0.00232EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/22 1:34 p.m.11 views

CVE-2019-25440

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prodid parameter. Attackers can send GET requests to productdetail.php with malicious prodid values to extract sensitive database informatio...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/22 12:00 a.m.14 views

PT-2026-21441

WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prod id parameter. Attackers can send GET requests to product detail.php with malicious prod id values to extract sensitive database...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References3
NVD
NVD
added 2026/02/03 6:16 p.m.28 views

CVE-2020-37108

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of productdetail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS0.00283EPSS
SaveExploits0References4
CVE
CVE
added 2026/02/03 4:52 p.m.30 views

CVE-2020-37108

The CVE-2020-37108 issue affects PhpIX 2012 Professional and is caused by an SQL injection in the id parameter of product_detail.php, enabling remote manipulation of database queries. Affected component: product_detail.php (id parameter). Underlying cause: improper handling/sanitization of user i...

7.1CVSS5.8AI score0.00283EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/02/03 4:52 p.m.11 views

EUVD-2020-30986

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of productdetail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS5.8AI score0.00283EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/03 4:52 p.m.4 views

CVE-2020-37108 PhpIX 2012 Professional - 'id' SQL Injection

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of productdetail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS5.8AI score0.00283EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.19 views

PT-2026-5854

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS6AI score0.00283EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.14 views

PhpIX SQL注入漏洞

PhpIX is a website building system developed by PhpIX Company in Thailand. PhpIX has a SQL injection vulnerability; this vulnerability stems from the id parameter in the productdetail.php file, which allows for SQL injections, potentially enabling remote attackers to manipulate database queries...

7.1CVSS5.9AI score0.00283EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2007-0096

Malware in sbrugna...

7.5CVSS6.3AI score0.01121EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2009-2769

Malware in sbrugna...

7.5CVSS6.4AI score0.00993EPSS
SaveExploits2References4
CNVD
CNVD
added 2025/07/18 12:00 a.m.9 views

Modern Bag product-detail.php file SQL Injection Vulnerability

Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter ID in the file /product-detail.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal S...

9.8CVSS8.2AI score0.00472EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/12 9:15 a.m.8 views

CVE-2025-7467

A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /product-detail.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

9.8CVSS5.7AI score0.00472EPSS
SaveExploits1References5
Rows per page
Query Builder