Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: Bylancer Clear all filters
TI-2018-15607 CVE-2018-25382 · GHSA-g3jh-2c96-x65c

Zechat 1.5 SQL Injection via uname Parameter

Priority HIGH 77

Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-29 No fix listed CWE-89
TI-2018-15559 CVE-2018-25334 · GHSA-j92p-x5jx-887r

Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter

Priority MEDIUM 57

Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00145 Published 2026-05-17 No fix listed CWE-352
TI-2018-15564 CVE-2018-25339 · GHSA-54vr-4j7c-rcvj

Zechat 1.5 SQL Injection via v parameter (time-based blind)

Priority HIGH 77

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00267 Published 2026-05-17 No fix listed CWE-89
TI-2018-15563 CVE-2018-25338 · GHSA-67j6-rmc9-jfxj

Zechat 1.5 SQL Injection via hashtag parameter

Priority HIGH 77

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00267 Published 2026-05-17 No fix listed CWE-89
TI-2025-12237 CVE-2025-13385 · GHSA-q6qq-mmmf-h3gm

Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter

Priority LOW 22

The Bookme – Free Online Appointment Booking and Scheduling Plugin for WordPress is vulnerable to time-based SQL Injection via the `filter[status]` parameter in all versions up to, and including, 4.2 due to insufficient…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00319 Published 2025-11-25 No fix listed CWE-89
TI-2023-03447 CVE-2023-3690 · GHSA-fqg4-3q52-9x7c

Bylancer QuickOrder GET Parameter blog sql injection

Priority MEDIUM 43

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-07-16 No fix listed CWE-89
TI-2023-03446 CVE-2023-3689 · GHSA-v9fw-q48r-m4pp

Bylancer QuickQR GET Parameter blog sql injection

Priority MEDIUM 43

A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-07-16 No fix listed CWE-89
TI-2023-03445 CVE-2023-3688 · GHSA-vh4c-q5r5-gh3r

Bylancer QuickJob GET Parameter sql injection

Priority MEDIUM 43

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-07-16 No fix listed CWE-89