Lucene search
K

1299 matches found

Vulnrichment
Vulnrichment
added 2026/03/12 3:36 p.m.0 views

CVE-2019-25522 XooGallery Lastest Latest Multiple SQL Injections via photo.php

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the photoid parameter. Attackers can send GET requests to photo.php with malicious photoid values to extract sensitive data, bypass...

8.8CVSS5.9AI score0.00263EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/09 12:48 p.m.11 views

CVE-2014-4944

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 categoryid or 2 pdfid parameter to wp-admin/admin.php...

6.5CVSS8.5AI score0.00826EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:44 p.m.4 views

CVE-2005-1734

Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

7.5CVSS9AI score0.00487EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:43 p.m.6 views

CVE-2005-1972

Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via 1 the username, which is not properly handled by the insertUser function, or 2 the bbsessionid value in a cookie...

7.5CVSS8.9AI score0.00375EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.6 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS8.3AI score0.00244EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:26 a.m.7 views

CVE-2021-28668

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities...

9.8CVSS8.1AI score0.00348EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:10 a.m.8 views

CVE-2016-10888

The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues...

9.8CVSS8.2AI score0.00546EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:55 a.m.4 views

CVE-2022-23693

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

8.8CVSS7.7AI score0.00415EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:17 a.m.4 views

CVE-2019-18229

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information...

6.5CVSS7.9AI score0.00651EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:6 a.m.4 views

CVE-2019-20107

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the 1 tprojectid parameter to keywordsView.php; the 2 reqspecid parameter to reqSpecCompareRevisions.php; the 3 requirementid parameter to...

8.8CVSS8.5AI score0.01782EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:11 a.m.3 views

CVE-2022-26120

Multiple improper neutralization of special elements used in an SQL Command 'SQL Injection' vulnerabilities CWE-89 in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP...

8.8CVSS8.1AI score0.00629EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.4 views

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.00097EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2006-2124

Malware in sbrugna...

6.4CVSS6.4AI score0.00496EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-0615

Malware in sbrugna...

7.5CVSS6.4AI score0.01408EPSS
Exploits2References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-0369

Malware in sbrugna...

7.5CVSS6.4AI score0.00441EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-6589

Malware in sbrugna...

7.5CVSS6.4AI score0.00619EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2012-4526

Malware in sbrugna...

6CVSS6.4AI score0.00322EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-4607

Malware in sbrugna...

7.5CVSS6.4AI score0.00768EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-4187

Malware in sbrugna...

7.5CVSS6.4AI score0.00264EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-4810

Malware in sbrugna...

7.5CVSS6.4AI score0.00131EPSS
Exploits1References5
Rows per page
Query Builder