Lucene search
+L

1563 matches found

EUVD
EUVD
added 2026/02/06 4:41 p.m.12 views

EUVD-2019-19398

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/06 4:41 p.m.24 views

CVE-2019-25300

The CVE-2019-25300 entry concerns thejshen Globitek CMS 1.4. The vulnerability is a SQL injection via the 'id' GET parameter, enabling manipulation of database queries. Attack techniques specified include boolean-based, time-based, and UNION-based SQL injections, which could potentially extract o...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/06 4:41 p.m.6 views

CVE-2019-25300 thejshen Globitek CMS 1.4 - 'id' SQL Injection

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/06 4:41 p.m.6 views

CVE-2019-25300

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/02/06 4:41 p.m.13 views

EUVD-2019-19401

html5snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through RouterID and RouterIP parameters. Attackers can exploit error-based, time-based, and union-based injection techniques to potentially extract or modify database information by...

7.1CVSS5.7AI score0.00385EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/02/06 4:41 p.m.5 views

CVE-2019-25298 html5_snmp 1.11 - 'Router_ID' SQL Injection

html5snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through RouterID and RouterIP parameters. Attackers can exploit error-based, time-based, and union-based injection techniques to potentially extract or modify database information by...

7.1CVSS5.7AI score0.00385EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/02/06 4:41 p.m.48 views

CVE-2019-25298 html5_snmp 1.11 - 'Router_ID' SQL Injection

html5snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through RouterID and RouterIP parameters. Attackers can exploit error-based, time-based, and union-based injection techniques to potentially extract or modify database information by...

9.1CVSS0.00385EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/06 4:41 p.m.6 views

CVE-2019-25298

html5snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through RouterID and RouterIP parameters. Attackers can exploit error-based, time-based, and union-based injection techniques to potentially extract or modify database information by...

7.1CVSS5.8AI score0.00385EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2026/02/06 4:41 p.m.21 views

CVE-2019-25298

The CVE-2019-25298 entry concerns html5_snmp version 1.11, where SQL injection flaws exist in the Router_ID and Router_IP parameters. The underlying vulnerability allows manipulation of database queries using error-based, time-based, and union-based techniques, potentially enabling extraction or ...

9.1CVSS5.7AI score0.00385EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.11 views

PT-2026-6737

Name of the Vulnerable Software and Affected Versions html5 snmp version 1.11 Description The software contains multiple SQL injection flaws that allow manipulation of database queries. Attackers can leverage the Router ID and Router IP parameters to exploit error-based, time-based, and union-bas...

9.1CVSS5.9AI score0.00385EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.20 views

PT-2026-6739

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.13 views

PT-2026-6742

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/02/05 11:48 a.m.172 views

sql-injection

SQL Injection Payloads List SQL Injection Payloads List...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/02/03 10:16 p.m.15 views

CVE-2020-37076

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based,...

8.8CVSS0.0038EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/03 10:16 p.m.14 views

CVE-2020-37076

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based,...

8.2CVSS5.9AI score0.0038EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:01 p.m.7 views

CVE-2020-37076

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based,...

8.8CVSS5.8AI score0.0038EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/03 10:01 p.m.40 views

CVE-2020-37076 Victor CMS 1.0 - 'post' SQL Injection

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based,...

8.8CVSS0.0038EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/02/03 10:01 p.m.3 views

CVE-2020-37076 Victor CMS 1.0 - 'post' SQL Injection

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based,...

8.8CVSS5.7AI score0.0038EPSS
SaveExploits1References3
CVE
CVE
added 2026/02/03 10:01 p.m.46 views

CVE-2020-37076

Victor CMS 1.0 is affected by a SQL injection in the post parameter of post.php. The vulnerability allows remote attackers to manipulate database queries using crafted UNION SELECT payloads to extract information via boolean-based, error-based, and time-based techniques. Reported across multiple ...

8.8CVSS5.8AI score0.0038EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.25 views

PT-2026-5827

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based,...

8.8CVSS5.9AI score0.0038EPSS
SaveExploits1References4
Rows per page
Query Builder