Lucene search
K

11 matches found

CNVD
CNVD
added 2026/05/07 12:0 a.m.6 views

XATABoost CMS SQL Injection Vulnerability

XATABoost CMS is a content management system from XATABoost that provides website content publishing and management functions. A SQL injection vulnerability exists in XATABoost CMS version 1.0.0. The vulnerability stems from the application's lack of validation of externally entered SQL statement...

8.8CVSS5.9AI score0.00124EPSS
Exploits0
NVD
NVD
added 2026/04/29 8:16 p.m.3 views

CVE-2018-25300

XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id parameter. Attackers can send GET requests to news.php with malicious id values to extract sensitive database informatio...

8.8CVSS0.00124EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/29 7:24 p.m.1 views

CVE-2018-25300 XATABoost CMS 1.0.0 SQL Injection via news.php

XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id parameter. Attackers can send GET requests to news.php with malicious id values to extract sensitive database informatio...

8.8CVSS5.7AI score0.00124EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/29 7:24 p.m.28 views

CVE-2018-25300 XATABoost CMS 1.0.0 SQL Injection via news.php

XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id parameter. Attackers can send GET requests to news.php with malicious id values to extract sensitive database informatio...

8.8CVSS0.00124EPSS
Exploits0References3
CVE
CVE
added 2026/04/29 7:24 p.m.8 views

CVE-2018-25300

XATABoost CMS 1.0.0 is affected by a union-based SQL injection via the id parameter in news.php, enabling unauthenticated attackers to manipulate queries and potentially extract sensitive database information. The vulnerability is evidenced in CVE-2018-25300 with CVSS v3.1 base score 8.2 ( HIGH )...

8.8CVSS5.7AI score0.00124EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/29 12:0 a.m.7 views

XATABoost CMS SQL注入漏洞

XATABoost CMS is a content management system from XATABoost that provides website content publishing and management functions. A SQL injection vulnerability exists in XATABoost CMS version 1.0.0. The vulnerability stems from the application's lack of validation of externally entered SQL statement...

8.8CVSS5.9AI score0.00124EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.4 views

PT-2026-35983

XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id parameter. Attackers can send GET requests to news.php with malicious id values to extract sensitive database informatio...

8.8CVSS5.7AI score0.00124EPSS
Exploits0References4
exploitpack
exploitpack
added 2018/05/14 12:0 a.m.17 views

XATABoost 1.0.0 - SQL Injection

XATABoost 1.0.0 - SQL Injection Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Date: 02.01.2018 Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example URL:...

Exploits0
0day.today
0day.today
added 2018/05/14 12:0 a.m.26 views

XATABoost 1.0.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example...

Exploits0
Exploit DB
Exploit DB
added 2018/05/14 12:0 a.m.34 views

XATABoost 1.0.0 - SQL Injection

Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Date: 02.01.2018 Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example URL:...

7AI score
Exploits0
Packet Storm
Packet Storm
added 2018/05/13 12:0 a.m.49 views

XATABoost 1.0.0 SQL Injection

Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Date: 02.01.2018 Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example URL:...

Exploits0
Rows per page
Query Builder