CVE-2026-54597

CVE-2026-54597 - Inyección SQL ciega basada en tiempo en ITFlow Gravedad: Alta Aviso: GHSA-m63v-j7fw-hq2h Afectado: ITFlow agent/ajax.php — parámetro expires Corregido en: Commit 63d8691 Autor: iltosec Resumen Una vulnerabilidad de inyección SQL ciega basada en tiempo en el manejador de generació...

CVE-2025-13673

CVE-2025-13673 — Laboratorio de Inyección SQL de Tutor LMS Inyección SQL no autenticada en el plugin de WordPress Tutor LMS = 3.9.6 mediante el parámetro couponcode. Inicio rápido 1. Clone and start the lab git clone https://github.com/dinosn/CVE-2025-13673.git cd CVE-2025-13673 ./setup.sh Deploy...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php inyección SQL NOMBRE DEL PRODUCTOS AFECTADOS AVL Rooms Página de inicio del proveedor https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ remitente dazhi Archivo vulnerable /city.php VERSIONES V1.0 Enlace d...

CVE-2016-2555

CVE-2016-2555 Exploit Este exploit se dirige a una vulnerabilidad de inyección SQL y a una vulnerabilidad de debilidad en la autenticación en ATutor 2.2.1. Al explotar estas vulnerabilidades, el atacante puede subir código malicioso para lograr ejecución remota de código RCE en el servidor...

CVE-2026-53629

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. Thi...

mirth-connect-security-poc

PoCs de vulnerabilidades de NextGen Connect 4.5.2 Exploits de prueba de concepto funcionales para tres vulnerabilidades alcanzables por red en NextGen Connect Mirth Connect 4.5.2. Los arneses ejecutan la imagen de contenedor oficial, crean únicamente la configuración de canal necesaria para el...

CVE-2026-53629

The asset management software GLPI is vulnerable to a blind SQL injection in the history log filter (referred to as LogBleed ) affecting versions from 9.4.0 until 10.0.26 and 11.0.8 . The root cause is located in the Log::convertFiltersValuesToSqlCriteria() function, which fails to properly handl...

EUVD-2026-87289

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. Thi...

CVE-2026-53629 GLPI: SQL injection in history tab

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. Thi...

CVE-2025-5781

Exploit de FreePBX CVE-2025-57819 Descripción Este script explota una vulnerabilidad en versiones de FreePBX anteriores a 16.0.26.0 CVE-2025-57819, permitiendo a atacantes remotos ejecutar código PHP arbitrario a través de una falla de inyección SQL en el endpoint de la API AJAX. El exploit crea...

CVE-2026-97884

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection. The...

CVE-2026-97886

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...

CVE-2026-97883

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. The manipulation of the argument gid leads to sql injection. The attack can be initiated remotely. Th...

CVE-2026-97885

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2026-97882

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file loginlinkfaculty.php of the component Faculty Authentication. Executing a manipulation of the argument fid/pass can lea...

CVE-2023-48084-Revised

CVE-2023-48084 — updated PoC Repository: MettHK/CVE-2023-48084-Revised Updated version of Hamibubu/CVE-2023-48084 with multithreading, binary-search extraction, and CLI flags for database / table / column selection. Not the original repository. This is a derivative/improved PoC. Credit for the...

CVE-2024-36058

CVE-2024-36058 — Koha Library Software ID CVE: CVE-2024-36058 Producto: Koha Library Software Tipo de Vulnerabilidad: Inyección SQL Ciega Basada en Tiempo CWE-89 Puntuación CVSS: 8.1 Alta Autenticada Versiones Afectadas: Inferiores a 22.05.22 Créditos: Karolis Narvilas Descripción Koha es un...

CVE-2026-97886

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw resides in an unknown functionality of the managevideos2.php file, where manipulation of the editassid argument allows for remote exploitation. Whi...

CVE-2026-97886 mathurvishal CloudClassroom-PHP-Project managevideos2.php sql injection

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...