Export limit exceeded: 21745 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,745

Export CSV
CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Bestwebsoft
Products
Limit Attempts
CVE-2015-9330

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Soflyy
Products
Wp All Import
CVE-2015-9323

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

CVSS 3.1 · 9.8 Critical EPSS 45.2% KEV · Not listed
Vendors
Duckdev
Products
404 To 301
CVE-2015-9316

The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.

CVSS 3.0 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Wpfastestcache
Products
Wp Fastest Cache
CVE-2015-9301

The liveforms plugin before 3.2.0 for WordPress has SQL injection.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
W3eden
Products
Live Forms
CVE-2015-9249

An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element.

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Skyboxsecurity
Products
Skybox Platform
CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Mysqljs
Products
Mysql
CVE-2015-8298

Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the (1) loginpassword, (2) loginusername, (3) zusatzlicher, or (4) groupid parameter to index.htm, or the (5) rxtec cookie to index.htm.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Rxtec
Products
Rxadmin
CVE-2015-7567

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Yeager
Products
Yeager Cms
CVE-2015-7342

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Joobi
Products
Jnews
CVE-2015-7340

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Gwesystems
Products
Jevents
CVE-2015-7338

SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Acyba
Products
Acymailing
CVE-2015-5725

SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Codeigniter
Products
Codeigniter