CVE-2022-23046

CVE-2022-23046 PHPIPAM 1.4.4 - SQLi Authenticated Orignal Exploit can be found here Original Exploit Author: Rodolfo "Inc0gbyt3" Tavares Tinker Script for CVE-2022-23046 I was having trouble getting the orginal script to run. Went ahead and tinkered with it for my use case. Used while completeing...

CVE-2022-42098

KLiK-SocialMediaWebsite version v1.0.1 Vulnerability Explanation: KLiK-SocialMediaWebsite v1.0.1 has SQL Injection Vulnerabilities on profile.php at parameter id. Attack Vectors: KLiK-SocialMediaWebsite v1.0.1 Once an user has been created it can also be find people on KLiK through the KLiK Users...

CVE-2024-27956

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. 📌 Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...

CVE-2023-23279

SQL injection in Canteen Management System v1.0. Bug author: Tuannq Discovered Day: 5/1/2023 Vendors: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login account: [email protected]/rootadmin Super Admin account Vulnerability File:...

CVE-2024-39304

Description This script is a PoC for CVE-2024-39304, where a SQLi is possible due to a lack of sanitization in the ChurchCRM project. Usage python3 CVE-2024-39304.py -u -p -b -v Example: python3 CVE-2024-39304.py -u FirstLast -p Password123 -b http://localhost/churchcrm -v Links...

CVE-2024-1071

CVE-2024-1071 CVE-2024-1071 Ultimate Member Unauthorized Database Access / SQLi PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2022-30512

CVE-2022-30512 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30512 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

Aj-Report-sql-CVE-2024-5356-POC

exp.py -u specifies URL or -f specifies file for batch detection, -t specifies threads, -h for help Usage pi install requirements.txt python exp.py -u 目标url -t 10 python exp.py -h Notes Ensure the URL starts with http:// or https://, otherwise an error will occur and cannot execute...

Published-CVE

Published-CVE This repository contains descriptions and exploits for two security vulnerabilities: 1. CVE-2023-33580: Stored Cross-Site Scripting XSS in the Student Study Center Management System V1.0, allowing attackers to execute arbitrary JavaScript code. 2. CVE-2023-33584: SQL Injection SQLI ...

CVE-2025-7605

CVE-2025-7605 code-projects AVL Rooms Project V1.0/profile.php SQL injection NAME OF AFFECTED PRODUCTS AVL Rooms Vendor Homepage https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ submitter dazhi Vulnerable File /profile.php VERSIONS V1.0 Software Link...

CVE-2022-30510

CVE-2022-30510 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30510 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

CVE-2026-9082

Drupal CVE-2026-9082 Scanner Semi-passive scanner that detects Drupal installations potentially vulnerable to CVE-2026-9082 PostgreSQL SQL injection. No SQL payloads sent. No state-changing requests. Vulnerable Versions Branch| Affected| Fixed ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x|...

CVE-2024-44542

CVE-2024-44542 Description: todesk v1.1 was discovered to contain a SQL injection vulnerability via the title parameter at /todesk.com/news.html. Vulnerability Type: SQL Injection Vendor of Product: todesk Affected Product Version: todesk - v1.1 Affected Component: todesk.com, news.html Attack...

CVE-2024-37791

CVE-2024-37791 CVE-2024-37791 Project address: Preparatory work: Log in to the backend - get cookie Vulnerability URL: http://127.0.0.1:8093/s/article/Content/index?classid=&keyword= Vulnerability parameter: keyword payload: %27andselectfromselect+ifasciisubstrdatabase,1,1%3E97,sleep1,0a//union/...

CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4...

EUVD-2026-102028

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4...

CVE-2026-109698

The Mang Board WP WordPress plugin (versions

roundcube-cve-2021-44026

Roundcube CVE-2021-44026, a SQL injection This repository contains a demo exploit for an SQL injection in Roundcube. Disclaimer : This code is intended solely for educational purposes and to assist security teams in identifying vulnerabilities in their Roundcube instances. It should only be used ...

CVE-2021-39378

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39378 A SQL Injection vulnerability exists in version 8.0 of openSIS when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the MySQL MariaDB database through the vulnerable str= parameter...

CVE-2021-39377

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39377 A SQL Injection vulnerability exists in version 8.0 of openSIS when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the Mysql MariaDB database through the vulnerable username= parameter...