Lucene search
+L

4 matches found

NVD
NVD
added 2026/08/05 8:16 a.m.9 views

CVE-2026-5651

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sqlquery' parameter in multiple AJAX actions askeetexecutesqlquery, askeetexportallresults in all versions up to, and including, 3.0. This is due to the askeetissafequery filter being bypassable using MySQL conditional commen...

4.9CVSS0.00378EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/05 6:38 a.m.38 views

CVE-2026-5651 Askeet <= 3.0 - Authenticated (Administrator+) SQL Injection via 'sql_query' Parameter

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sqlquery' parameter in multiple AJAX actions askeetexecutesqlquery, askeetexportallresults in all versions up to, and including, 3.0. This is due to the askeetissafequery filter being bypassable using MySQL conditional commen...

4.9CVSS0.00378EPSS
SaveExploits0References6
CNVD
CNVD
added 2015/05/07 12:0 a.m.12 views

Fortinet FortiAnalyzer 'sql-query' Cross-Site Scripting Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The solution is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

4.3CVSS6.5AI score0.02388EPSS
SaveExploits4References1
OSV
OSV
added 2006/04/18 10:2 a.m.7 views

DEBIAN-CVE-2006-1803

Cross-site scripting XSS vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sqlquery parameter...

4.3CVSS6AI score0.02538EPSS
SaveExploits2References1
Rows per page
Query Builder