Lucene search
+L

9 matches found

CVE
CVE
•added 2025/09/08 2:32 a.m.•38 views

CVE-2025-10079

CVE-2025-10079 affects PHPGurukul Small CRM 4.0. The vulnerability is in the file /get-quote.php where manipulation of the contact parameter (Contact) enables a SQL injection. The issue can be exploited remotely, with exploit activity described as published and potentially usable in the wild. Doc...

9.8CVSS7.2AI score0.00412EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•0 views

CVE-2025-10079: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS5.6AI score0.00412EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/02/14 10:17 a.m.•13 views

CVE-2023-24204

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS8AI score0.00639EPSS
SaveExploits2References1
NVD
NVD
•added 2024/05/14 5:15 p.m.•73 views

CVE-2023-24204

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS8.2AI score0.00639EPSS
SaveExploits2References3
OSV
OSV
•added 2024/05/14 5:15 p.m.•23 views

CVE-2023-24204

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS6.2AI score0.00639EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•3 views

CVE-2023-24204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

5.4CVSS6.5AI score0.00639EPSS
SaveExploits2References1
Hacker One
Hacker One
•added 2018/05/21 11:10 p.m.•52 views

WordPress: XSS on support.wordcamp.org in ajax-quote.php

Hi, There is an XSS vulnerability in ajax-quote.php on http://support.wordcamp.org. It can be demonstrated with the attached POC - this needs to be run in Firefox to execute, as it's super basic and XSS Auditor will catch it but with multiple parameters, even with one of them filtered, it's likel...

0.2AI score
SaveExploits0
CVE
CVE
•added 2005/11/06 11:00 a.m.•61 views

CVE-2005-3514

Chipmunk Forum XSS vulnerability CVE-2005-3514 affects the Chipmunk Forum script (Chipmunk Forum

4.3CVSS5.9AI score0.02692EPSS
SaveExploits3References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/06 12:00 a.m.•5 views

CVE-2005-3514: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to 1 newtopic.php, 2 quote.php, 3 index.php, and 4 reply.php...

4.3CVSS5.9AI score0.02692EPSS
SaveExploits3References1
Rows per page
Query Builder