CVE-2026-114621

The baserCMS website development framework is vulnerable to SQL injection in versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2. The root cause is that list and detail actions within the Admin and Api/Admin prefixes pass request query parameters (such as contain, conditions, fields, finder, and o...

EUVD-2026-108991

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

CVE-2026-114621 baserCMS: SQL injection in the admin panel and admin API

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

CVE-2026-114621 baserCMS: SQL injection in the admin panel and admin API

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-35511 Description: Vulnerable to SQL Injection via 'username' parameter. Affect...

census

CΞNSUS — Advanced SQL Injection Cheatsheet CΞNSUS by LΞG...

AutoSQLi

AutoSQLi, the new way script-kiddies hack websites Features Save System - there is a complete save system, which can resume even when your pc crashed. - technology is cool Dorking - from the command line one dork : YES - from a file: NO - from an interactive wizard: YES Waffing - Thanks to...

CVE-2024-34220

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vender: SourceCodester AFFECTED AND/OR FIXED VERSION Vulnerable File applyleave.php PROBLEM TYPE Vulnerability Type SQL Injection Impact The attackers can exploit this vulnerability to gain database...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

CVE-2019-9053

CVE-2019-9053 Improved code of Daniele Scanu SQL Injection exploit Following changes applied: Added time control variable -t or --time that enables user to extend the timing of SQL injection useful if a network connection in between hosts is subject of delays with packet transmission Network...

CVE-2026-112837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

CVE-2026-112860

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

spip-exploits

Casse-Spip CVE-2026-72708, CVE-2026-72709, CVE-2026-72710 From an Unauthenticated SQL Injection to Remote Code Execution Exploit for CVE-2026-72708, CVE-2026-72709 and CVE-2026-72710 discovered by Franck Chevalier Wayko For a complete technical deep dive, read the full article on Lexfo's blog...

CVE-2026-112860

The Participants Database plugin for WordPress (versions

CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

EUVD-2026-108630

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

EUVD-2026-108627

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

CVE-2026-112837 WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

CVE-2026-112837

The GamiPress WordPress plugin, specifically versions 8.0.7 and earlier , is vulnerable to a Blind SQL Injection flaw. This issue stems from the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). An attacker can exploit this vulnerability to perform unauthorized database...

CVE-2026-63030

CVE-2026-63030 WordPress REST Batch Route-Confusion SQL Injection CVE-2026-63030 Proof of Concept Research, Exploit Development & Documentation by Ch4120N ⚠️ Legal Disclaimer This repository and the accompanying tool exploit.py are intended strictly for educational purposes, authorized penetration...