CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-12232 – code-projects Simple CRUD Functionality index.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-12232
05 Dec 2024 — A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://code-projects.org • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-48078
https://notcve.org/view.php?id=CVE-2023-48078
16 Nov 2023 — SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter. Vulnerabilidad de inyección SQL en add.php en Simple CRUD Functionality v1.0 permite a atacantes ejecutar comandos SQL arbitrarios a través del parámetro 'title'. • https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •