Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/28 1:41 p.m.6 views

MAL-2026-11132 Malicious code in bianira-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...

6.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/24 11:27 a.m.27 views

CVE-2019-25640 Inout Article Base CMS Lastest SQL Injection via portalLogin.php

Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters. Attackers can inject SQL code using XOR-based payloads in GET requests to portalLogin.php to extract sensitive database information...

8.8CVSS0.00334EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 11:27 a.m.6 views

CVE-2019-25640 Inout Article Base CMS Lastest SQL Injection via portalLogin.php

Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters. Attackers can inject SQL code using XOR-based payloads in GET requests to portalLogin.php to extract sensitive database information...

8.8CVSS6AI score0.00334EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/24 11:27 a.m.11 views

CVE-2019-25640

Inout Article Base CMS is affected by SQL injection via portalLogin.php. The flaw allows unauthenticated attackers to manipulate queries through the p and u parameters, with XOR-based payloads in GET requests used to inject SQL, potentially extracting sensitive data or causing time-based DoS. Aff...

8.8CVSS6AI score0.00334EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.18 views

PT-2026-27374

Name of the Vulnerable Software and Affected Versions Inout Article Base CMS affected versions not specified Description Unauthenticated attackers can manipulate database queries using SQL injection. By sending GET requests to the 'portalLogin.php' endpoint, attackers can inject SQL code via...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits0References5
Rows per page
Query Builder