Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to rate.php, (2) cid parameter to view.php, or. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
SQLi
Php X Links
NVD
Exploit-DB
CVSS 2.0
7.5
EPSS
0.5%
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQLi
Je Poll Component
NVD
CVSS 2.0
7.5
EPSS
0.5%