Skip to content
Threat Feed
Subscribe

Tag

Webapp

5 briefs RSS
high advisory

Twitter-Clone 1 SQL Injection Vulnerability (CVE-2018-25362)

Twitter-Clone 1 is vulnerable to SQL injection via the userid parameter in follow.php, allowing attackers to manipulate database queries and extract sensitive information such as usernames, passwords, and database credentials.

Twitter-Clone 1 sqlinjection cve webapp
2r 1t 1c
high advisory

SQL Injection Vulnerability in projectworlds hospital-management-system-in-php 1.0 (CVE-2026-8785)

A SQL injection vulnerability (CVE-2026-8785) exists in the getAllPatientDetail function of the update_info.php file in projectworlds hospital-management-system-in-php version 1.0, allowing remote attackers to execute arbitrary SQL commands via the 'appointment_no' GET parameter.

hospital-management-system-in-php 1.0 cve sql-injection webapp
2r 1t 1c
high advisory

coreruleset 4.21.0 Firewall Bypass Vulnerability

A firewall bypass vulnerability has been identified in coreruleset version 4.21.0, with a public exploit available on Exploit-DB, potentially increasing the risk of exploitation for unpatched systems.

coreruleset firewall bypass webapp
1r 1t
critical advisory

Advance Gift Shop Pro Script 2.0.3 SQL Injection Vulnerability

Advance Gift Shop Pro Script 2.0.3 is vulnerable to SQL injection via the 's' search parameter, allowing unauthenticated attackers to execute arbitrary SQL queries and extract sensitive database information.

sqli vulnerability webapp
2r 1t 1c
critical threat

MindsDB Path Traversal Vulnerability Leading to Remote Code Execution

A path traversal vulnerability in MindsDB versions prior to 25.9.1.1 allows an attacker to achieve remote code execution by uploading a malicious payload and triggering its execution.

MindsDB path-traversal rce webapp
3r 2t 1c