5 matches found
CVE-2024-44651
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...
6.5CVSS5.8AI score0.00235EPSS
SaveExploits1References2
EUVD-2022-37887
Malicious code in bioql PyPI...
9.8CVSS9.2AI score0.01009EPSS
SaveExploits1References1
CVE-2022-34989
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
9.8CVSS8.3AI score0.01009EPSS
SaveExploits1References1
CVE-2022-34989
CVE-2022-34989 impacts Fruits Bazar v1.0, where a SQL injection vulnerability exists in the recover_email parameter of the table/user_password_recover.php. The NVD entry assigns a CVSS3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and no privileges required, affecting ...
9.8CVSS9.7AI score0.01009EPSS
SaveExploits1References1Affected Software1
20