Lucene search
+L

306 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•7 views

CVE-2025-10683: Improper Neutralization of Special Elements used in an SQL Command

The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS5.8AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•35 views

PT-2025-45171

Name of the Vulnerable Software and Affected Versions Easy Email Subscription plugin for WordPress versions up to and including 1.3 Description The Easy Email Subscription plugin for WordPress is susceptible to SQL Injection via the uid parameter. This is due to inadequate input sanitization and...

4.9CVSS6.7AI score0.00296EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/28 9:51 a.m.•29 views

CVE-2025-12253

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/getexpiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be initiated remotely. The exploit has be...

9.8CVSS7.1AI score0.00437EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/27 9:15 a.m.•25 views

CVE-2025-12253

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/getexpiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be initiated remotely. The exploit has be...

9.8CVSS0.00437EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/27 9:02 a.m.•24 views

EUVD-2025-36138

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/getexpiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS7.1AI score0.00437EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•27 views

Project Monitoring System useredit.php File SQL Injection Vulnerability

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uid in the file /useredit.php. An attacker can exploit this vulnerabilit...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/12 3:17 p.m.•29 views

CVE-2025-11605

A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

6.5CVSS6.6AI score0.0036EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/11 2:32 p.m.•23 views

EUVD-2025-33865

A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

6.5CVSS6.6AI score0.0036EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•21 views

Code-Projects Client Details System SQL Injection Vulnerability

Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uid in the file /admin/update-profile.php. An attacker can exploit this...

8.8CVSS6.7AI score0.0036EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/10/10 9:16 p.m.•23 views

CVE-2025-11585

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/10 9:16 p.m.•24 views

CVE-2025-11585

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/10 9:02 p.m.•14 views

CVE-2025-11585 code-projects Project Monitoring System useredit.php sql injection

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/10 9:02 p.m.•35 views

CVE-2025-11585 code-projects Project Monitoring System useredit.php sql injection

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•21 views

Code-Projects Project Monitoring System SQL Injection Vulnerability

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uid in the file /useredit.php. An attacker can exploit this vulnerabilit...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-3874

Malware in sbrugna...

7.5CVSS6.4AI score0.00893EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2005-2698

Malware in sbrugna...

7.5CVSS6.4AI score0.01265EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2008-6408

Malware in sbrugna...

7.5CVSS6.4AI score0.03396EPSS
SaveExploits5References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2005-0283

Malware in sbrugna...

7.5CVSS6.3AI score0.02087EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2008-6491

Malware in sbrugna...

6.5CVSS6.4AI score0.02037EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2008-4333

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References4
Rows per page
Query Builder