Unrestricted file upload in Simple Photo Gallery 1.0 allows remote attackers to upload malicious PHP files via the /upload-photo.php endpoint without authentication, enabling remote code execution on the web server. Although exploit code is publicly available, the EPSS score (0.12%) is low, and no active exploitation is reported—real-world risk appears limited by the application's niche deployment.
SQL injection in SourceCodester Simple Company Website 1.0 allows remote attackers to manipulate the login process via the Username parameter in /classes/Login.php. A publicly available proof-of-concept exploit exists, and EPSS indicates a 0.09% probability of exploitation, but no active exploitation campaigns are confirmed.
SQL injection in Inventory Management System 1.0 allows unauthorized database manipulation via the orderId parameter. An unauthenticated remote attacker can exploit the /php_action/editPayment.php endpoint to execute arbitrary SQL statements. Public exploit code is available, though no active exploitation has been confirmed, and the EPSS probability is low.
SQL injection in PHPGurukul Local Services Search Engine Management System 2.1 enables remote unauthenticated attackers to inject arbitrary SQL commands via the editid parameter in /admin/edit-category-detail.php, potentially allowing unauthorized database access or modification. A publicly available proof-of-concept exists, but real-world exploitation remains minimal with EPSS at 0.06% (18th percentile), indicating the vulnerable application has extremely limited deployment footprint despite the publicly disclosed vulnerability.
SQL injection in Simple Forum 1.0 allows remote attackers to execute arbitrary SQL queries via the User parameter in /register1.php. A public exploit is available on GitHub, increasing the likelihood of targeted attacks, though the EPSS score is low at 0.06% indicating limited active exploitation at present.
SQL injection in Simple Forum 1.0's signin.php allows remote attackers to manipulate the User parameter, potentially leading to unauthorized data access or modification. The vulnerability is publicly disclosed with exploit code available, though EPSS scoring indicates low immediate exploitation probability.
SQL injection in the login endpoint of code-projects Product Inventory System 1.0 allows remote attackers to manipulate the Username parameter. This can lead to authentication bypass, data leakage, or database tampering. Exploit code is publicly available, but no active exploitation campaign has been confirmed.
SQL injection in code-projects Library System 1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the phone parameter in /profile.php. The vulnerability has a publicly available proof-of-concept, though no active exploitation is confirmed and EPSS estimates low short-term exploitation probability (0.06%). Impact is limited per CVSS scoring, primarily posing a risk of data theft or tampering.
SQL injection in Code-Projects Library System 1.0 allows remote unauthenticated attackers to manipulate database queries via the 'reg' parameter in /student-issue-book.php. Public exploit code is available, enabling potential data tampering or unauthorized access. Despite a network attack vector, CVSS 4.0 rates overall severity as medium (5.5) due to limited impact.
Remote SQL injection in Simple Forum 1.0 allows unauthenticated attackers to execute arbitrary SQL commands via the 'Name' parameter in /forum_viewfile.php. Public exploit code exists but no active exploitation is known; EPSS score is very low (0.04%) indicating limited real-world targeting despite high technical impact potential.
A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile.
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all versions up to, and including, 5.25.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-24915 is a security vulnerability (CVSS 6.1). Remediation should follow standard vulnerability management procedures.
Improper neutralization of SQL injection defenses in ESAPI esapi-java-legacy's Encoder.encodeForSQL method allows remote attackers to bypass sanitization and inject arbitrary SQL commands. The vulnerability affects all versions prior to 2.7.0.0 and public exploit code has been released. Although the fix disables the method by default, applications that explicitly call encodeForSQL remain at risk.