Lucene search
K

8 matches found

Vulnrichment
Vulnrichment
added 2026/01/09 4:2 p.m.3 views

CVE-2025-15492 RainyGao DocSys GroupMemberMapper.xml sql injection

A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possible to initiate the attack remotely. Th...

6.5CVSS6.5AI score0.00378EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 11:58 p.m.7 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.8CVSS8.2AI score0.06711EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.4 views

SUSE CVE-2008-7271

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

4.3CVSS6AI score0.01899EPSS
Exploits1References3
OSV
OSV
added 2022/01/31 10:15 p.m.2 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.5CVSS7.2AI score0.06711EPSS
Exploits1References2
NVD
NVD
added 2020/01/22 4:15 p.m.14 views

CVE-2011-3595

Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...

5.4CVSS5.5AI score0.00814EPSS
Exploits1References3
CVE
CVE
added 2020/01/22 3:20 p.m.44 views

CVE-2011-3595

CVE-2011-3595 involves multiple Cross-site Scripting (XSS) vulnerabilities in Joomla! up to version 1.7.0. The issue resides in index.php, within the search word, extension, asset, and author parameters, enabling XSS in affected requests. The provided documents confirm the affected software versi...

5.4CVSS5.5AI score0.00814EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2011/11/01 10:55 p.m.3 views

CVE-2010-4976

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

4.3CVSS5.7AI score0.01736EPSS
Exploits1References7
myhack58
myhack58
added 2011/03/25 12:0 a.m.14 views

Blue corporate web site management system English fan version V1. 0 vulnerability-vulnerability warning-the black bar safety net

Blue corporate web site management system English fan version V1. 0 vulnerability this program- - how to look like the w78 program Background image- - even the search word search out of Also the same - but the file names are different. - - Nothing- -ewebeditor 5.5 upload vulnerability form...

0.2AI score
Exploits0
Rows per page
Query Builder