Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2025/10/11 9:02 a.m.•6 views

CVE-2025-11594 ywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validati...

6.9CVSS5.2AI score0.00455EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/11 12:00 a.m.•9 views

CVE-2025-11594: Improper Validation of Specified Quantity in Input

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validati...

6.9CVSS5.3AI score0.00455EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/02/03 9:01 a.m.•5 views

Malware in npm-website-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2012/08/25 12:00 a.m.•31 views

Pululart CMS SQL Injection

Exploit Title: Pululart CMS Sql Injection Vulnerability Google Dork:intext:"Powered by Pululart" Date: 08/24/2012 Author: Crim3R Vendor Home : http://www.pululart.com/ Tested on: all $ $ ----Author will be not responsible for any damage---- $ ========================================...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2011/03/21 12:00 a.m.•36 views

EAFlashUpload 2.5 - Arbitrary File Upload

Exploit Title: EAFlashUpload v 2.5 File Arbitrary Upload Date: 21/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: EAFlashUpload v 2.5 Software Link: http://www.easyalgo.com/downloads.aspxEAFlashUpload Demo:...

5.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/01/28 12:00 a.m.•31 views

Makit Newsposter Script News_Page.ASP SQL注入漏洞

Makit Newsposter Script是一款基于ASP的WEB应用程序。 Makit Newsposter Script不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,获得敏感信息。 问题是'NewsPage.ASP'脚本对用户提交的'uid'参数缺少过滤,提交恶意SQL脚本代码作为参数数据,可更改原来的SQL逻辑,导致获得敏感信息。 Makit Newsposter Script 目前没有详细解决方案提供: http://www.makit.net/...

7.1AI score
SaveExploits0
Rows per page
Query Builder