CVE-2025-13121

A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/app/Http/Controllers/Front/StoreController.php of the component API Endpoint. Such manipulation of the argument lng/lat leads to sql injection. The attack may be performed from...

PT-2025-46863

Name of the Vulnerable Software and Affected Versions cameasy Liketea version 1.0.0 Description A security issue exists in cameasy Liketea 1.0.0. The list function within the file laravel/app/Http/Controllers/Front/StoreController.php of the API Endpoint component is susceptible to SQL injection...

Carsale 安全漏洞

Carsale is an open source automobile sales management system from Hitout. A security vulnerability exists in Carsale version 1.0, which originates from an SQL injection in the orderBy parameter of the StoreController.java component, which may lead to the disclosure of sensitive information...

PT-2025-16359 · Unknown · Hitout Carsale

Name of the Vulnerable Software and Affected Versions: Hitout car sale version 1.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component. Recommendations: For version 1.0, consider restricting...