Lucene search
+L

3 matches found

OSV
OSV
•added 2025/09/04 2:15 p.m.•15 views

CVE-2025-57263

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...

7.2CVSS5.9AI score0.00396EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/04 12:00 a.m.•46 views

CVE-2025-57263

VX Guestbook version 1.07 is affected by an authenticated SQL injection vulnerability. Attackers with admin access can inject malicious SQL payloads by exploiting the "word" POST parameter within the words.php admin panel . The practical consequence is the ability to execute arbitrary SQL command...

7.2CVSS7.4AI score0.00396EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•2 views

CVE-2025-57263: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...

7.2CVSS5.9AI score0.00396EPSS
SaveExploits1References1
Rows per page
Query Builder