Total
409311 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2019-25500 | 1 Simplejobscript | 1 Simplejobscript | 2026-06-17 | N/A | 8.2 HIGH |
| Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter. Attackers can send POST requests to the register-recruiters endpoint with time-based SQL injection payloads to extract sensitive data or modify database contents. | |||||
| CVE-2019-25499 | 1 Simplejobscript | 1 Simplejobscript | 2026-06-17 | N/A | 8.2 HIGH |
| Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter. Attackers can send POST requests to get_job_applications_ajax.php with malicious job_id values to bypass authentication, extract sensitive data, or modify database contents. | |||||
| CVE-2019-25498 | 1 Simplejobscript | 1 Simplejobscript | 2026-06-17 | N/A | 8.2 HIGH |
| Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landing_location parameter. Attackers can send POST requests to the searched endpoint with malicious SQL payloads to bypass authentication and extract sensitive database information. | |||||
| CVE-2019-25497 | 1 Oscommerce | 1 Oscommerce | 2026-06-17 | N/A | 8.2 HIGH |
| osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping_cart.php with malicious currency values using boolean-based SQL injection payloads to extract sensitive database information. | |||||
| CVE-2019-25496 | 1 Oscommerce | 1 Oscommerce | 2026-06-17 | N/A | 8.2 HIGH |
| osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter. Attackers can modify the products_id value in product_info.php requests and append boolean-based SQL injection payloads to extract sensitive database information. | |||||
| CVE-2019-25495 | 1 Oscommerce | 1 Oscommerce | 2026-06-17 | N/A | 8.2 HIGH |
| osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter. Attackers can send GET requests to product_reviews_write.php with malicious reviews_id values using boolean-based SQL injection payloads to extract sensitive database information. | |||||
| CVE-2019-25494 | 1 Doditsolutions | 1 Airbnb Clone Script | 2026-06-17 | N/A | 8.2 HIGH |
| Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields. Attackers can submit SQL operators like '=' 'or' in both credentials to manipulate the authentication query and gain unauthorized access to the admin panel. | |||||
| CVE-2019-25493 | 1 Doditsolutions | 1 Airbnb Clone Script | 2026-06-17 | N/A | 8.2 HIGH |
| Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter. Attackers can send GET requests to the admin/getrecord.php endpoint with malicious 'val' values to extract sensitive database information. | |||||
| CVE-2019-25492 | 1 Doditsolutions | 1 Airbnb Clone Script | 2026-06-17 | N/A | 8.2 HIGH |
| Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter. Attackers can send GET requests to the admin/getcmsdata.php endpoint with malicious 'pt' values to extract sensitive database information. | |||||
| CVE-2019-25491 | 1 Doditsolutions | 1 Airbnb Clone Script | 2026-06-17 | N/A | 8.2 HIGH |
| Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attackers can send GET requests to the admin/cms_getpagetitle.php endpoint with malicious catid values to extract sensitive database information. | |||||
| CVE-2019-25490 | 1 Doditsolutions | 1 Airbnb Clone Script | 2026-06-17 | N/A | 8.2 HIGH |
| Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers can send GET requests to the admin/edit.php endpoint with time-based SQL injection payloads to extract sensitive database information. | |||||
| CVE-2019-25489 | 1 Doditsolutions | 1 Airbnb Clone Script | 2026-06-17 | N/A | 8.2 HIGH |
| Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter. Attackers can send GET requests to the rooms/ajax_refresh_subtotal endpoint with malicious hosting_id values to extract sensitive database information or cause denial of service. | |||||
| CVE-2019-25488 | 1 Jettweb | 1 Php Ready Rent A Car Site Script | 2026-06-17 | N/A | 8.2 HIGH |
| Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into the 'tur', 'id', and 'ozellikdil' parameters of the admin/index.php endpoint to extract sensitive database information or cause denial of service. | |||||
| CVE-2019-25487 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges. | |||||
| CVE-2019-25486 | 2026-06-17 | N/A | 8.2 HIGH | ||
| Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_id parameter. Attackers can submit POST requests with crafted SQL payloads in the user_id field to bypass authentication and extract sensitive database information. | |||||
| CVE-2019-25485 | 2026-06-17 | N/A | 6.2 MEDIUM | ||
| R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges. | |||||
| CVE-2019-25484 | 2026-06-17 | N/A | 6.2 MEDIUM | ||
| WinMPG iPod Convert 3.0 contains a buffer overflow vulnerability in the Register dialog that allows local attackers to crash the application by supplying an oversized payload. Attackers can paste a large string of characters into the User Name and User Code field to trigger a denial of service condition. | |||||
| CVE-2019-25483 | 2026-06-17 | N/A | 8.4 HIGH | ||
| Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the command substitution operator $( ). Attackers can inject arbitrary commands through the $( ) syntax when passed as arguments to allowed commands like ping to execute unrestricted shell access. | |||||
| CVE-2019-25482 | 1 Jettweb | 1 Php Ready Rent A Car Site Script | 2026-06-17 | N/A | 8.2 HIGH |
| Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the arac_kategori_id parameter. Attackers can send POST requests to the endpoint with malicious SQL payloads to extract sensitive database information. | |||||
| CVE-2019-25481 | 2026-06-17 | N/A | 8.2 HIGH | ||
| iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jqSearchDestination parameter. Attackers can send POST requests to the search endpoint with crafted SQL payloads to extract sensitive database information. | |||||