9 matches found
CVE-2026-108258
Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...
CVE-2026-108258 Shiny for Python - Path traversal in bookmark restore
Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...
EUVD-2017-8796
Malware in sbrugna...
CVE-2025-2054: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editstate.php. The manipulation of the argument stateid leads to sql injection. The attack can be launched...
CVE-2017-17638
Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...
Sql injection
Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...
CVE-2017-17638
Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...
CVE-2017-17638
The CVE relates to Groupon Clone Script 3.01, where an SQL Injection vulnerability exists in city_ajax.php via the state_id parameter. Public references (Exploit-DB, Packet Storm) indicate a remote attacker could leverage this to inject SQL commands. The CVSS metrics indicate a high severity (AV:...