Lucene search
+L

9 matches found

NVD
NVD
•added 2022/01/31 10:15 p.m.•31 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.8CVSS0.06711EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/31 10:15 p.m.•15 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.8CVSS7.2AI score0.06711EPSS
SaveExploits1References4
Prion
Prion
•added 2022/01/31 10:15 p.m.•31 views

Sql injection

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.8CVSS7.7AI score0.06711EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/01/31 9:27 p.m.•4 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

8.7CVSS0.06711EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/01/31 9:27 p.m.•39 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

8AI score0.06711EPSS
SaveExploits1References2
CVE
CVE
•added 2022/01/31 9:27 p.m.•99 views

CVE-2022-24264

CVE-2022-24264 concerns Cuppa CMS v1.0. A SQL injection vulnerability exists in the admin path /administrator/components/table_manager/ via the search_word parameter (CWE-89). This could allow an attacker to manipulate SQL queries, potentially leading to unauthorized access and data exposure with...

7.8CVSS7.7AI score0.06711EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/31 12:00 a.m.•6 views

CVE-2022-24264: Improper Neutralization of Special Elements used in an SQL Command

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.8CVSS7.2AI score0.06711EPSS
SaveExploits1References2
CVE
CVE
•added 2012/02/14 5:00 p.m.•57 views

CVE-2012-1069

The CVE-2012-1069 entry describes a Cross-site Scripting (XSS) vulnerability in the search module’s Word search function (module/kb/search_word) in lknSupport, exploitable via PATH_INFO to inject arbitrary scripts/HTML. Impact details indicate no confidentiality or availability impact, but partia...

4.3CVSS5.9AI score0.01464EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/14 12:00 a.m.•6 views

CVE-2012-1069: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in module/kb/searchword in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS6AI score0.01464EPSS
SaveExploits2References2
Rows per page
Query Builder