Lucene search
K

630 matches found

CNVD
CNVD
added 2022/05/09 12:0 a.m.16 views

WDJA SQL Injection Vulnerability

Wdja is a Php-based content management system from the WDJA team. v2.1 of WDJA is vulnerable to SQL injection, which stems from the impact of a SQL injection vulnerability in the front-end search function. An attacker can exploit the vulnerability for SQL injection...

7.5CVSS3AI score0.01016EPSS
Exploits1Affected Software1
OSV
OSV
added 2022/05/04 12:15 p.m.1 views

CVE-2021-42185

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

9.8CVSS5.8AI score0.01016EPSS
Exploits1References2
NVD
NVD
added 2022/05/04 12:15 p.m.8 views

CVE-2021-42185

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

9.8CVSS0.01016EPSS
Exploits1References2
Prion
Prion
added 2022/05/04 12:15 p.m.9 views

Sql injection

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

7.5CVSS9.7AI score0.01016EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/05/04 11:6 a.m.58 views

CVE-2021-42185

CVE-2021-42185 affects the PHP-based CMS WDJA v2.1, with a SQL injection in the foreground search function. The issue is documented across multiple sources (NVD entry notes a SQLi vulnerability in the front-end search; Red Hat and CNVD entries corroborate WDJA v2.1 exposure). CVSS data in the NVD...

9.8CVSS9.8AI score0.01016EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/04 11:6 a.m.15 views

CVE-2021-42185

wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function...

10AI score0.01016EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2022/05/02 12:0 a.m.212 views

WordPress Stafflist 3.1.2 SQL Injection

Exploit Title: WordPress Plugin stafflist 3.1.2 - SQL Injection Authenticated Date: 05-02-2022 Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/stafflist/ Version: 3.1.2 Tested on: Firefox Contact me: h at spidersilk.com Vulnerable Code: $w =...

0.6AI score
Exploits0
CNVD
CNVD
added 2022/03/31 12:0 a.m.20 views

Shopware B2B-Suite SQL Injection Vulnerability (CNVD-2022-82575)

Shopware is a suite of e-commerce software from the German company Shopware.Shopware B2B-Suite 4.4.1 and prior versions are vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements applied to the sort-by parameter of the search function. An authenticat...

4CVSS6.9AI score0.01345EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/12/22 11:15 p.m.0 views

CVE-2020-20425

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

6.1CVSS5.7AI score
Exploits0References3
Prion
Prion
added 2021/12/22 11:15 p.m.17 views

Cross site scripting

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

4.3CVSS6AI score0.00895EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2021/12/22 10:29 p.m.49 views

CVE-2020-20425

S-CMS Government Station Building System v5.0 (PHP/MySQL CMS) includes a cross-site scripting (XSS) vulnerability in the search function. The CVE description confirms XSS in this release; connected sources reiterate S-CMS v5.0 as affected and describe the vulnerability class. No root cause detail...

6.1CVSS5.9AI score0.00895EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2021/12/13 12:0 a.m.2 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language.Lets-Box Plugin is a WordPress open source application plugin.Wordpress Lets-Box Plugin has a cross-site scripting vulnerability in versions prior to 1.15.3, which stems from the Lets-Box Plugin'...

6.1CVSS5.7AI score0.00729EPSS
Exploits0References2
NVD
NVD
added 2021/10/28 3:15 p.m.10 views

CVE-2021-41728

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

6.1CVSS0.00618EPSS
Exploits0References1
Prion
Prion
added 2021/10/28 3:15 p.m.18 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

4.3CVSS6AI score0.00618EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/10/28 2:37 p.m.46 views

CVE-2021-41728

CVE-2021-41728 describes a Cross-Site Scripting (XSS) vulnerability in Sourcecodester News247 CMS 1.0, exploitable via the search function in articles. All connected documents consistently identify the affected product as News247 CMS v1.0 and report user-side script execution risk, but do not pro...

6.1CVSS6AI score0.00618EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/28 2:37 p.m.14 views

CVE-2021-41728

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...

6.2AI score0.00618EPSS
Exploits0References1
Prion
Prion
added 2021/10/22 8:15 p.m.10 views

Stack overflow

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

7.2CVSS6.7AI score0.00401EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/10/22 7:20 p.m.34 views

CVE-2020-28964

CVE-2020-28964 affects Internet Download Manager (IDM) 6.37.11.1, with a stack buffer overflow in the Search function. The root cause is an overflow in the search workflow that could enable local privilege escalation. The documents consistently describe the vulnerability as local and requiring no...

7.2CVSS6.7AI score0.00401EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/22 7:20 p.m.11 views

CVE-2020-28964

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

6.8AI score0.00401EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/10/22 12:0 a.m.1 views

Internet Download Manager 缓冲区错误漏洞

Tonec Fze Internet Download Manager Idm is a tool to increase download speeds by up to five times, resume and schedule downloads from Tonec Fze, Inc. A buffer error vulnerability exists in Internet Download Manager 6.37.11.1, which originates from a stack buffer overflow found in the search...

7.2CVSS6.8AI score0.00401EPSS
Exploits1References2
Rows per page
Query Builder