CVE-2025-50972

SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmplid parameter to index.php. Three techniques have been demonstrated: error-based injection using a crafted FLOOR-based payload, time-based blind injection via SLEEP, and...

PT-2022-12186

Name of the Vulnerable Software and Affected Versions bloofoxCMS versions 0.5.1 through 0.5.2.1 Description Multiple SQL Injection vulnerabilities exist in the software via the URLs, lang id, tmpl id, mod rewrite, eta doctype, meta charset, default group, and page group parameters in the settings...