Lucene search
+L

6 matches found

CNNVD
CNNVD
•added 2025/12/28 12:00 a.m.•17 views

MOOC 代码注入漏洞

MOOC is an online video education website by yourmaileyes individual developer. A code injection vulnerability exists in MOOC 1.17 and earlier versions, which stems from the incorrect operation of the parameter review in the file mooc/controller/MainController.java, and could lead to cross-site...

5.1CVSS4.8AI score0.00233EPSS
SaveExploits0References5
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•20 views

Online Shopping Portal product-details.php file SQL Injection Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the name, summary, review, quality, price, and value parameters in product-details.php. An attacker c...

6.5CVSS6.1AI score0.00258EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/17 12:00 a.m.•7 views

CVE-2024-44664

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php...

5.8AI score0.00258EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•34 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the name, summary, review, quality, price, and value parameters in product-details.php. An attacker c...

6.5CVSS8.2AI score0.00258EPSS
SaveExploits1References3
NVD
NVD
•added 2008/05/28 3:32 p.m.•30 views

CVE-2008-2493

Cross-site scripting XSS vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter...

4.3CVSS5.7AI score0.01449EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/28 12:00 a.m.•8 views

CVE-2008-2493: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter...

4.3CVSS5.9AI score0.01449EPSS
SaveExploits2References2
Rows per page
Query Builder