Lucene search
K

5 matches found

CNNVD
CNNVD
added 2025/12/28 12:0 a.m.4 views

MOOC 代码注入漏洞

MOOC is an online video education website by yourmaileyes individual developer. A code injection vulnerability exists in MOOC 1.17 and earlier versions, which stems from the incorrect operation of the parameter review in the file mooc/controller/MainController.java, and could lead to cross-site...

5.1CVSS4.8AI score0.00191EPSS
Exploits0References5
CNVD
CNVD
added 2025/11/20 12:0 a.m.2 views

Online Shopping Portal product-details.php file SQL Injection Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the name, summary, review, quality, price, and value parameters in product-details.php. An attacker c...

6.5CVSS8.3AI score0.0021EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.4 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the name, summary, review, quality, price, and value parameters in product-details.php. An attacker c...

6.5CVSS8.2AI score0.0021EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.2 views

CVE-2024-44664

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php...

7.6AI score0.0021EPSS
Exploits1References2
NVD
NVD
added 2008/05/28 3:32 p.m.14 views

CVE-2008-2493

Cross-site scripting XSS vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter...

4.3CVSS5.7AI score0.01449EPSS
Exploits1References3
Rows per page
Query Builder