Sql injection

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-50866 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-50866: Improper Neutralization of Special Elements used in an SQL Command

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database...

Netartmedia PHP Dating Site - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Netartmedia Php Dating Site - SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.netartmedia.net/datingsite/ Demo Site: https://www.phpscriptdemos.com/dating/ Version: Lastest Tested on: Kali Linux CVE:...

Netartmedia PHP Business Directory 4.2 - SQL Injection

Netartmedia PHP Business Directory 4.2 - SQL Injection Exploit Title: Netartmedia PHP Business Directory 4.2 - SQL Injection Date: 19.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.phpbusinessdirectory.com/ Demo Site: https://www.bizwebdirectory.com/ Version: 4.2 Tested on...

Netartmedia PHP Business Directory 4.2 SQL Injection

Exploit Title: Netartmedia PHP Business Directory 4.2 - SQL Injection Date: 19.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.phpbusinessdirectory.com/ Demo Site: https://www.bizwebdirectory.com/ Version: 4.2 Tested on: Kali Linux CVE: N/A ----- PoC SQLi ----- Request:...

京信通信/09/business/loginAction.php username参数命令执行漏洞

No description provided by source...

ROCKOA 2.1.8 /webrock/login/loginAction.php SQL 注入漏洞

No description provided by source...

CVE-2009-4613: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2009-4600

NetArt Media Real Estate Portal 2.0 is affected. The vulnerability resides in realestate20/loginaction.php where the Email parameter (username field) is used in SQL without proper sanitization, allowing remote attackers to execute arbitrary SQL commands. This is a classic SQL injection with poten...

CVE-2009-4600: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Email parameter aka the username field. NOTE: some of these details are obtained from third party information...

CVE-2009-4351: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email aka username parameter...