2162 matches found
EUVD-2009-4816
Malware in sbrugna...
GHSA-GPRP-H92G-GC2H XWiki Platform is vulnerable to HQL injection via wiki and space search REST API
Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...
XWiki Platform is vulnerable to HQL injection via wiki and space search REST API
Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...
CVE-2025-61224
Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...
CVE-2025-52472 XWiki Platform vulnerable to HQL injection via wiki and space search REST API
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is...
EUVD-2022-4769
Malicious code in bioql PyPI...
EUVD-2022-38835
Malicious code in bioql PyPI...
EUVD-2024-42520
Malicious code in bioql PyPI...
EUVD-2023-32493
Malicious code in bioql PyPI...
EUVD-2024-26878
Malicious code in bioql PyPI...
EUVD-2023-2812
Malicious code in bioql PyPI...
EUVD-2023-1264
Malicious code in bioql PyPI...
EUVD-2024-34996
Malicious code in bioql PyPI...
EUVD-2024-42517
Malicious code in bioql PyPI...
EUVD-2025-9784
Malicious code in bioql PyPI...
EUVD-2022-4667
Malicious code in bioql PyPI...
EUVD-2025-13785
Malicious code in bioql PyPI...
EUVD-2021-31657
Malicious code in bioql PyPI...