Lucene search
+L

16797 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:51 p.m.17 views

CVE-2014-4307

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter...

7.5CVSS8.8AI score0.02239EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:47 p.m.16 views

CVE-2005-1128

Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries...

7.5CVSS9AI score0.01111EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:46 p.m.7 views

CVE-2005-1904

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

7.5CVSS8.9AI score0.01211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:46 p.m.19 views

CVE-2005-1629

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...

7.5CVSS8.9AI score0.02089EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:44 p.m.12 views

CVE-2005-1149

SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

7.5CVSS9AI score0.01108EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:44 p.m.12 views

CVE-2005-1419

SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Adminid parameter...

7.5CVSS8.8AI score0.0133EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:44 p.m.13 views

CVE-2005-1585

Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 iCategory or 2 page parameter to index.php, or 3 iCategory parameter in the query string to the forum directory...

7.5CVSS9AI score0.01316EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:43 p.m.9 views

CVE-2005-1639

SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the 1 username, 2 password, or 3 domain fields...

7.5CVSS8.8AI score0.01316EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:42 p.m.15 views

CVE-2005-1804

Multiple SQL injection vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 terme parameter in the glossaire module glossaire.php or 2 query parameter to links.php...

7.5CVSS9AI score0.01083EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:42 p.m.13 views

CVE-2005-1084

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter...

7.5CVSS8.8AI score0.01124EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.11 views

CVE-2023-25700

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...

9.8CVSS8.9AI score0.00756EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.15 views

CVE-2023-25350

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...

8.8CVSS7.4AI score0.00805EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.10 views

CVE-2023-43610

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor without setting authority or higher privilege to perform unintended database operations...

8.8CVSS7.8AI score0.00909EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.13 views

CVE-2023-43986

DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken...

9.8CVSS8.3AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.9 views

CVE-2023-43371

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle parameter at /hoteldruid/creaprezzi.php...

9.8CVSS8.2AI score0.0091EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.11 views

CVE-2023-43469

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php component...

9.8CVSS8.7AI score0.00953EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.8 views

CVE-2023-43381

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

7.5CVSS7.6AI score0.01018EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.9 views

CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...

8.8CVSS8AI score0.00731EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.9 views

CVE-2023-29622

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchaseorder/admin/login.php...

9.8CVSS8.4AI score0.01657EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.12 views

CVE-2023-50027

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run method...

9.8CVSS8.2AI score0.00748EPSS
SaveExploits1References1
Rows per page
Query Builder