Lucene search
K

23 matches found

NVD
NVD
added 2026/03/12 4:16 p.m.1 views

CVE-2019-25527

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the numguest parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL payloa...

9.1CVSS0.00263EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/12 3:36 p.m.20 views

CVE-2019-25527 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the numguest parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL payloa...

8.8CVSS0.00263EPSS
Exploits1References2
CVE
CVE
added 2026/03/12 3:36 p.m.2 views

CVE-2019-25526

Inout EasyRooms Ultimate Edition v1.0 is vulnerable to SQL injection via the location parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL payloads to extract data or modify database contents. No remediation or fixed version is specified in the prov...

9.1CVSS5.9AI score0.00178EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/03/12 3:36 p.m.20 views

CVE-2019-25525 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the guests parameter. Attackers can send POST requests to the search/rentals endpoint with malicious SQL payloads to...

8.8CVSS0.00263EPSS
Exploits1References2
CVE
CVE
added 2026/03/12 3:36 p.m.3 views

CVE-2019-25525

CVE-2019-25525 affects Inout EasyRooms Ultimate Edition v1.0. The vulnerability is an SQL injection in the guests parameter that can be exploited via POST to the search/rentals endpoint, enabling unauthenticated attackers to bypass authentication and potentially extract or modify data. The provid...

9.1CVSS5.9AI score0.00263EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/12 3:36 p.m.2 views

CVE-2019-25525

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the guests parameter. Attackers can send POST requests to the search/rentals endpoint with malicious SQL payloads to...

8.8CVSS5.9AI score0.00263EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/12 3:36 p.m.0 views

CVE-2019-25525 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the guests parameter. Attackers can send POST requests to the search/rentals endpoint with malicious SQL payloads to...

8.8CVSS5.9AI score0.00263EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.0 views

PT-2026-24988

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the property1 parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL...

8.8CVSS5.9AI score0.00178EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.2 views

PT-2026-24985

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the guests parameter. Attackers can send POST requests to the search/rentals endpoint with malicious SQL payloads to...

8.8CVSS5.9AI score0.00263EPSS
Exploits1References3
CNVD
CNVD
added 2017/09/18 12:0 a.m.2 views

SugarCRM Cross-Site Scripting Vulnerability

SugarCRM Professional is a professional version of an open source customer relationship management system CRM from SugarCRM USA. The system supports differentiated marketing for different customer needs, managing and distributing sales leads, and enabling information sharing and tracking of sales...

6.1CVSS6AI score0.00341EPSS
Exploits1References1
0day.today
0day.today
added 2017/01/14 12:0 a.m.21 views

Inout Webmail Ultimate Edition 4.0 Script - Improper Access Restrictions Vulnerability

Exploit for php platform in category web applications Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Webmail Ultimate Edition v4.0 Script Version: Ultimate Edition v4.0, Ultimate Hypertable Version Script Buy Now:...

0.1AI score
Exploits0
exploitpack
exploitpack
added 2017/01/13 12:0 a.m.22 views

Inout Search Engine Ultimate Edition 7.08.0 Script - Improper Access Restrictions

Inout Search Engine Ultimate Edition 7.08.0 Script - Improper Access Restrictions Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Search Engine Ultimate Edition Script Script Version: v7.0, v8.0 Script Buy Now:...

Exploits0
0day.today
0day.today
added 2014/12/15 12:0 a.m.43 views

JourneyMap 5.0.0RC2 Ultimate Edition - DoS

Exploit for multiple platform in category dos / poc Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version: 5.0.0RC2 Ultimate Edition Test...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability

No description provided by source. ======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] $ | Web Site...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2010/03/16 12:0 a.m.37 views

Interspire Shopping Cart 5.5.4 Shell Upload

======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] | | Web Site http://www.megaupload.com/?d=VCXHBRO9 | Script Powered by...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2010/03/15 12:0 a.m.32 views

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump

======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] $ | Web Site http://www.megaupload.com/?d=VCXHBRO9 $ | Script Powered by...

7.4AI score
Exploits0
0day.today
0day.today
added 2010/03/15 12:0 a.m.33 views

INTERSPIRE SHOPPING CART 5.5.4 Ultimate Edition backup dump Vuln

Exploit for unknown platform in category web applications ========================================================================= INTERSPIRE SHOPPING CART 5.5.4 Ultimate Edition backup dump Vulnerability =========================================================================...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2010/03/15 12:0 a.m.22 views

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump ======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] $ | Web Site...

7.4AI score
Exploits0
myhack58
myhack58
added 2009/02/13 12:0 a.m.9 views

Ewebeditor2. 8. 0 Ultimate Edition delete arbitrary file vulnerability-vulnerability warning-the black bar safety net

Author: oldjun This vulnerability can very tasteless, it can be fatal, the key to see how you use! This vulnerability is present in Example\NewsSystem directory delete. asp file, which is ewebeditor test page, without the login you can go directly to, to see these code: 'The band"|"the string...

0.2AI score
Exploits0
securityvulns
securityvulns
added 2009/01/18 12:0 a.m.34 views

[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

7.1AI score
Exploits0
Rows per page
Query Builder