blockisec/PoCs

Releases0

Stars1

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-47740 ↗	Jan 19, 2023Thursday, 19 January 2023, 18:15	9.8 CRITICAL	—
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.
CVE-2021-41755 ↗	Jun 10, 2022Friday, 10 June 2022, 22:15	9.8 CRITICAL	7.5 HIGH
dynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php.
CVE-2021-41756 ↗	Jun 10, 2022Friday, 10 June 2022, 22:15	9.8 CRITICAL	7.5 HIGH
dynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php.
CVE-2021-41754 ↗	Jun 10, 2022Friday, 10 June 2022, 21:15	9.8 CRITICAL	7.5 HIGH
dynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php.
CVE-2022-30469 ↗	Jun 6, 2022Monday, 6 June 2022, 21:15	8.8 HIGH	6.5 MEDIUM
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman&section=get&page=grid` leads to SQL injection.
CVE-2021-46444 ↗	Jan 28, 2022Friday, 28 January 2022, 22:15	9.8 CRITICAL	7.5 HIGH
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_group_edit&agID.
CVE-2021-46445 ↗	Jan 28, 2022Friday, 28 January 2022, 22:15	9.8 CRITICAL	7.5 HIGH
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box_group_id.
CVE-2021-46446 ↗	Jan 28, 2022Friday, 28 January 2022, 22:15	9.8 CRITICAL	7.5 HIGH
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.
CVE-2021-46447 ↗	Jan 28, 2022Friday, 28 January 2022, 22:15	5.4 MEDIUM	3.5 LOW
A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module.
CVE-2021-46448 ↗	Jan 28, 2022Friday, 28 January 2022, 22:15	9.8 CRITICAL	7.5 HIGH
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID.