Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests.Check if you run itEPSS 0.15%Mar 6, 2026
- High8.8Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the orderCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.8Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks.Check if you run itEPSS 0.39%Mar 6, 2026
- Medium6.9Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoCheck if you run itEPSS 0.16%Mar 6, 2026
- Medium6.9Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter.Check if you run itEPSS 0.92%Mar 6, 2026
- High8.8Silurus Classifieds Script 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through thCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.7Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter.Check if you run itEPSS 0.72%Mar 6, 2026
- High7.1Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter iCheck if you run itEPSS 0.22%Mar 6, 2026
- High8.8Gumbo CMS 0.99 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the language paramCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.7Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter.Check if you run itEPSS 0.66%Mar 6, 2026
- Medium6.9Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POSTCheck if you run itEPSS 0.14%Mar 6, 2026
- High8.8Alive Parish 2.0.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the key parameCheck if you run itEPSS 0.23%Mar 6, 2026
- High8.8Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the identifCheck if you run itEPSS 0.29%Mar 6, 2026
- Medium6.9ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php.Check if you run itEPSS 0.14%Mar 6, 2026
- High8.8Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter.Check if you run itEPSS 0.33%Mar 6, 2026
- High8.8EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.32%Mar 6, 2026
- High8.8DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, and idU parameCheck if you run itEPSS 0.15%Mar 6, 2026
- High8.7AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port.Check if you run itEPSS 0.39%Mar 6, 2026
- Medium5.3Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting craftedCheck if you run itEPSS 0.26%Mar 6, 2026
- High8.8Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the seaCheck if you run itEPSS 0.27%Mar 6, 2026
- High7.1Galaxy Forces MMORPG 0.5.8 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'typCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.7EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory.Check if you run itEPSS 0.31%Mar 6, 2026
Sort