Lucene search
K

14 matches found

Cvelist
Cvelist
added 2025/01/07 6:0 p.m.19 views

CVE-2025-0301 code-projects Online Book Shop subcat.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some unknown functionality of the file /subcat.php. The manipulation of the argument catnm leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS0.0018EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/01/07 6:0 p.m.11 views

CVE-2025-0301 code-projects Online Book Shop subcat.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some unknown functionality of the file /subcat.php. The manipulation of the argument catnm leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS6.4AI score0.0018EPSS
Exploits1References5
OSV
OSV
added 2025/01/07 5:15 p.m.1 views

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.5AI score0.00191EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.1 views

PT-2025-3820 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue was found in the code-projects Online Book Shop, affecting an unknown functionality of the file /subcat.php. The manipulation of the cat argument leads to SQL injection...

8.8CVSS8.1AI score0.00191EPSS
Exploits1References8
CVE
CVE
added 2024/12/26 12:0 p.m.51 views

CVE-2024-12950

The CVE-2024-12950 entry concerns code-projects/projectworlds Travel Management System v1.0, where the parameter catid in /subcat.php allows SQL injection. The root cause is improper handling/manipulation of the catid argument, leading to a remote, unauthenticated injection with potential impact ...

8.8CVSS7.3AI score0.00082EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2021/07/22 8:15 p.m.10 views

Sql injection

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

7.5CVSS9.8AI score0.00513EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/07/22 7:8 p.m.76 views

CVE-2021-25213

CVE-2021-25213 affects SourceCodester Travel Management System v1.0. The entry documents an SQL injection vulnerability exploitable remotely via the catid parameter to subcat.php, allowing arbitrary SQL execution with high impact (CVSS v3.1: 9.8). The root cause is improper handling of user-suppl...

9.8CVSS9.8AI score0.00513EPSS
Exploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2018/06/04 10:8 a.m.19 views

lorilocks.ca XSS vulnerability

Open Bug Bounty ID: OBB-626871 Description| Value ---|--- Affected Website:| lorilocks.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

AJ Auction Pro All Versions - (subcat.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : /subcat.php?cateid= $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV 1...

7.1AI score
Exploits0
Prion
Prion
added 2007/03/07 12:19 a.m.15 views

Sql injection

SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

7.5CVSS9AI score0.01729EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2007/03/07 12:19 a.m.10 views

CVE-2007-1298

SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

7.5CVSS8.4AI score0.01729EPSS
Exploits1References6
CVE
CVE
added 2007/03/07 12:0 a.m.102 views

CVE-2007-1298

CVE-2007-1298 describes an SQL injection in subcat.php of AJ Auction 1.0, exploitable via the cate_id parameter. The root cause is improper handling of user input leading to arbitrary SQL execution on remote systems. The affected component is AJ Auction 1.0, specifically the subcat.php script; im...

7.5CVSS8.4AI score0.01729EPSS
Exploits1References6Affected Software1
exploitpack
exploitpack
added 2007/03/04 12:0 a.m.20 views

AJ Auction Pro - subcat.php SQL Injection

AJ Auction Pro - subcat.php SQL Injection !/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket;...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2007/03/04 12:0 a.m.40 views

AJ Auction Pro - 'subcat.php' SQL Injection

!/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir =...

7.4AI score
Exploits0
Rows per page
Query Builder