Lucene search
K

101 matches found

NVD
NVD
added 2026/06/04 2:16 p.m.8 views

CVE-2019-25745

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid'...

8.8CVSS0.00262EPSS
Exploits0References3
EUVD
EUVD
added 2026/06/04 1:22 p.m.11 views

EUVD-2019-20181

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid'...

8.8CVSS5.9AI score0.00262EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/06/04 1:22 p.m.34 views

CVE-2019-25745 WordPress Plugin Google Review Slider 6.1 SQL Injection via tid

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid'...

8.8CVSS0.00262EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/04 1:22 p.m.5 views

CVE-2019-25745

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid'...

8.8CVSS5.9AI score0.00262EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/06/04 1:22 p.m.16 views

CVE-2019-25745

CVE-2019-25745 affects WordPress Plugin Google Review Slider 6.1. The vulnerability is a time-based blind SQL injection in the tid parameter, exploitable via GET requests to the plugin’s admin interface by unauthenticated attackers to manipulate queries and potentially extract data. According to ...

8.8CVSS5.9AI score0.00262EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/06/04 12:0 a.m.2 views

WordPress plugin Google Review Slider SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

8.8CVSS5.8AI score0.00262EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.5 views

JIZHICMS SQL注入漏洞

JIZHICMS Jizhi CMS is an open source content management system CMS from China Jizhi JIZHI. A SQL injection vulnerability exists in JIZHICMS 2.5.5 and earlier versions, which stems from incorrect manipulation of the parameter aid/tid in the file /index.php/admins/Comment/addcomment.html, which may...

7.2CVSS5.5AI score0.00328EPSS
Exploits1References5
OSV
OSV
added 2025/11/19 9:15 p.m.3 views

CVE-2025-13410

A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and...

9.8CVSS5.8AI score0.00339EPSS
Exploits1References5
NVD
NVD
added 2025/11/19 9:15 p.m.3 views

CVE-2025-13410

A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and...

9.8CVSS0.00339EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/19 8:32 p.m.3 views

CVE-2025-13410 Campcodes Retro Basketball Shoes Online Store receipt.php sql injection

A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and...

7.5CVSS7.3AI score0.00339EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/19 8:32 p.m.11 views

CVE-2025-13410 Campcodes Retro Basketball Shoes Online Store receipt.php sql injection

A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and...

7.5CVSS0.00339EPSS
Exploits1References5
CVE
CVE
added 2025/11/19 8:32 p.m.13 views

CVE-2025-13410

CVE-2025-13410 affects Campcodes Retro Basketball Shoes Online Store 1.0. The vulnerable component is the file /admin/receipt.php , where an attacker can manipulate the tid argument to trigger a SQL injection. This is described as a remote, publicly disclosed vulnerability with exploitation detai...

9.8CVSS6.8AI score0.00339EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-8285

Malware in sbrugna...

9.8CVSS9.5AI score0.01135EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-2757

Malware in sbrugna...

7.5CVSS6.4AI score0.01312EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-1358

Malware in sbrugna...

7.5CVSS6.4AI score0.00999EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-2388

Malware in sbrugna...

7.5CVSS6.4AI score0.00999EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-6118

Malware in sbrugna...

7.5CVSS6.4AI score0.00973EPSS
Exploits1References5
NVD
NVD
added 2025/08/19 4:15 p.m.3 views

CVE-2025-50938

Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...

6.1CVSS0.00225EPSS
Exploits1References2
OSV
OSV
added 2025/08/19 4:15 p.m.2 views

CVE-2025-50938

Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...

6.1CVSS6.1AI score
Exploits0References2
CNVD
CNVD
added 2025/07/04 12:0 a.m.2 views

Teachers Record Management System edit-teacher-detail.php File SQL Injection Vulnerability

Teachers Record Management System is a teacher record management system. Teachers Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter tid in the file /admin/edit-teacher-detail.php. A...

9.8CVSS7.9AI score0.00399EPSS
Exploits1References1
Rows per page
Query Builder