Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, 6:08 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253221 | 4.3 | 警告 | My Kazaam | - | My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4985 | 2011-12-9 14:35 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253222 | 7.5 | 危険 | Cafuego | - | Simple Document Management System における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4986 | 2011-12-9 14:34 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253223 | 7.5 | 危険 | KMSoft | - | KMSoft Guestbook の default.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4987 | 2011-12-9 14:34 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253224 | 7.5 | 危険 | FamilyCMS | - | Family Connections Who is Chatting における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4988 | 2011-12-9 14:33 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253225 | 7.5 | 危険 | Farsi CMS | - | Ziggurat Farsi CMS の main.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4989 | 2011-12-9 14:28 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253226 | 7.5 | 危険 | B-Elektro | - | Joomla! 用 Front-edit Address Book コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4990 | 2011-12-9 14:28 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253227 | 7.5 | 危険 | Ninja Forge | - | Joomla! 用 NinjaMonials コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4991 | 2011-12-9 14:27 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253228 | 7.5 | 危険 | Payments Plus | - | Joomla! 用 Payments Plus コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4992 | 2011-12-9 14:26 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253229 | 7.5 | 危険 | Kay Messerschmidt | - | Joomla! 用 eventcal コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4993 | 2011-12-9 14:26 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 253230 | 7.5 | 危険 | Instant Php | - | Joomla! 用 Jobs Pro コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4994 | 2011-12-9 14:25 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 259741 | 8.8 |
HIGH
Network |
dasinfomedia | wpams_apartment_management_system | Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14847 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259742 | 8.8 |
HIGH
Network |
dasinfomedia | hospital_management_system | Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14846 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259743 | 8.8 |
HIGH
Network |
dasinfomedia | wpchurch_church_management_system | Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14845 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259744 | 8.8 |
HIGH
Network |
dasinfomedia | wpgym_gym_management_system | Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14844 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259745 | 8.8 |
HIGH
Network |
dasinfomedia | school_management_system | Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14843 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259746 | 8.8 |
HIGH
Network |
dasinfomedia | smsmaster_multipurpose_sms_gateway | Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14842 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259747 | 6.5 |
MEDIUM
Network |
dasinfomedia | annual_maintenance_contract_management_system | Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14841 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259748 | 8.8 |
HIGH
Network |
teamworktec | ticketplus | TeamWork TicketPlus allows Arbitrary File Upload in updateProfile. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14840 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259749 | 8.8 |
HIGH
Network |
teamworktec | photo_fusion | TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14839 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 259750 | 8.8 |
HIGH
Network |
teamworktec | job_links | TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14838 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |