CVE-2026-63030

wp2shell — RCE pre-autenticación en el núcleo de WordPress CVE-2026-63030 Confusión de ruta en lote + CVE-2026-60137 Inyección SQL Kit de explotación sin dependencias para la cadena de vulnerabilidades wp2shell en el núcleo de WordPress. Una única solicitud HTTP anónima logra la ejecución remota ...

AutoSQLi

AutoSQLi，脚本小子黑网站的新方式 功能 保存系统 - 有一个完整的保存系统，即使电脑崩溃也能恢复。 - 科技很酷 搜索引擎搜索 - 从命令行（单个搜索引擎搜索）：是 - 从文件：否 - 从交互式向导：是 WAF检测 - 感谢 Ekultek，WhatWaf 现在有了 JSON 输出功能。 - 所以基本完成 : - 更新：WhatWaf 已完全与 AutoSQLi 兼容。Sqlmap 是下一个重要步骤 SQL注入映射 - 我会看看是否有某种 sqlmap API，因为我这次不想用 execute（: - Sqlmap 很酷 报告生成：是 提供 Rest API：否...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Inyección SQL Admin+ Descripción El complemento de WordPress LearnDash con versión inferior a 4.25.6 es vulnerable a inyección SQL Admin+. Detalles Tipo : plugin Slug : sfwd-lms Versión afectada : Puntuación CVSS : 9.8 Gravedad CVSS : Crítica Vector CVSS :...

CVE-2022-23046

CVE-2022-23046 原始发现和手动PoC来自Fluidattacks: PhpIPAM v1.4.4 允许经过身份验证的管理员用户在通过 app/admin/routing/edit-bgp-mapping-search.php 搜索子网时，在“subnet”参数中注入 SQL 语句。 此PoC执行一些简单的SQL注入以获取如下信息： 基础服务器信息 SMTP设置 其他身份验证方法（如AD/LDAP/Radius） PHPIpam用户和哈希 MySQL数据库用户 其他可用模式...

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 多个SQL注入漏洞 - studentform.php 和 classform.php 描述 ：Simple Student Attendance System v.1.0 存在多个SQL注入漏洞，可被认证攻击者利用。这些漏洞存在于 studentform.php 和 classform.php 中，允许通过 'id' 参数执行任意SQL命令。 受影响产品版本 ：Simple Student Attendance System v.1.0 CVE作者 ：Geraldo...

CVE-2024-32369

CVE-2024-32369 Descripción: Vulnerabilidad de inyección SQL en HSC Cybersecurity HSC Mailinspector v.5.2.17-3 permite a un atacante remoto obtener información sensible mediante un payload manipulado en los parámetros start y limit en el componente mliWhiteList.php. Versiones: Descubierta en HSC...

CVE-2023-1454-EXP

JeecgBoot SQL（CVE-2023-1454）exp 1.漏洞详情 jeecg-boot 3.5.0版本存在SQL注入漏洞，该漏洞源于文件 jmreport/qurestSql 存在安全问题， 通过参数 apiSelectId 导致SQL注入。 2.使用方法 python3 CVE-2023-1454.py optional arguments: -h, --help show this help message and exit -u URL, --url URL Specify the base URL --current-db View current database...

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

YMC Filter - SQL Injection

YMC Filter = 3.11.5 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-54836 info: name: YMC Filter - SQL Injection author: theamanrawat severity: critical...

WordPress Car Seller - Auto Classifieds Script - SQL Injection

The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitize, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL injection...

SuiteCRM - SQL Injection

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue. id: CVE-2024-36412 info: name: SuiteC...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

Themes Coder Ecommerce <= 1.3.4 - SQL Injection

The Themes Coder Ecommerce WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-13726 info: name: Themes Coder Ecommerce = 1.3.4 - SQL...

WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection

The wcfmajaxcontroller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections. id: CVE-2021-24849 info: name: WCFM...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

Dokan Pro <= 3.10.3 - SQL Injection

The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. id: CVE-2024-3922 info: name: Dokan Pro...

VICIdial - SQL Injection

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database. id: CVE-2024-8503 info: name: VICIdial - SQL Injection author: s4e-io severity: critical description:...

SiYuan - SQL Execution

SiYuan = v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleRead...