Vulnerabilities

TI-2019-15693 CVE-2019-25640 · GHSA-ppx7-4jww-hqvw

Inout Article Base CMS Lastest SQL Injection via portalLogin.php

HIGH 77

Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0034 Published 2026-03-24 No fix listed CWE-89

TI-2019-15581 CVE-2019-25528 · GHSA-w72p-m2gh-w9qh

Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

HIGH 77

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the property1 parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00456 Published 2026-03-12 No fix listed CWE-89

TI-2019-15580 CVE-2019-25527 · GHSA-c9rf-43r2-cr76

Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed

HIGH 77

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the numguest parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00465 Published 2026-03-12 No fix listed CWE-89

TI-2019-15579 CVE-2019-25526 · GHSA-pgj4-8jxq-ffx7

Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

HIGH 77

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the location parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00394 Published 2026-03-12 No fix listed CWE-89

TI-2019-15578 CVE-2019-25525 · GHSA-q2hg-rp7v-x5j9

Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

HIGH 77

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the guests parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00465 Published 2026-03-12 No fix listed CWE-89

TI-2019-15532 CVE-2019-25479 · GHSA-j8vq-g9m5-68xg

Inout RealEstate Lastest SQL Injection via agentlistdetails

HIGH 77

Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00438 Published 2026-03-12 No fix listed CWE-89

TI-2022-15743 CVE-2022-34988 · GHSA-6phw-cwr4-6vjp

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting…

LOW 25

Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/js.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00581 Published 2022-07-26 No fix listed CWE-79

TI-2022-13413 CVE-2022-31487 · GHSA-2gvh-7c9c-xgq4

Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow…

LOW 35

Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2022-05-23 No fix listed CWE-89

TI-2022-13414 CVE-2022-31488 · GHSA-wx7w-x95x-c7gm

Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.

LOW 35

Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2022-05-23 No fix listed CWE-89

TI-2022-13415 CVE-2022-31489 · GHSA-326g-xf83-pf2m

Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.

LOW 35

Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2022-05-23 No fix listed CWE-89

TI-2009-03068 CVE-2009-3223 · GHSA-q792-q593-g5f3

SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote…

LOW 31

SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00897 Published 2009-09-16 No fix listed CWE-89

Vulnerabilities

Filters