CVE-2026-79303

CVE-2026-79303 ブール型ブラインドSQLインジェクション 説明 : 必要なデータ検証を行わず、パラメータ化されたステートメントやストアドプロシージャを使用せずに動的SQLステートメントが生成されます。 影響 : SQLi CVSSv3.1ベクター : AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 9.9 Critical CWE : CWE-89: SQLコマンドで使用される特殊要素の不適切な無害化（'SQLインジェクション'） 影響を受けるコンポーネント : GETパラメータ orderby および orderdirection ベンダー :...

CVE-2026-28576-poc

CVE-2026-28576: Android 連絡先プロバイダーにおけるSQLインジェクション 1件の連絡先を選択しただけで、すべての連絡先が漏洩する: targetSdk互換ゲートにより、単一連絡先ピッカーの権限付与が連絡先データベース全体のダンプに変わる。 Android 17 は Contacts Provider を setStrictColumns / setStrictGrammar でSQLインジェクションに対して強化しましたが、その強化は targetSdk ゲート付きの互換性変更 ENFORCESTRICTSQLCHECKS、id...

CVE-2025-2812

CVE-2025-2812 — Mydata Bilişim Ltd. Şti 製「Bilet Satış Otomasyonu」におけるSQLインジェクションの脆弱性 📌 CVE-ID: CVE-2025-2812 📢 USOM 通知: tr-25-0099 🛡️ 脆弱性タイプ: CWE-89 - SQL Injection Boolean-based Blind 🏢 影響を受ける製品: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti 🌐 対象URL例:...

CVE-2026-52770

YesWiki , a PHP-based wiki system, is affected by an unauthenticated SQL injection in its public Bazar entry-listing APIs prior to version 4.6.6 . The root cause lies in SearchManager::buildQueriesConditions(), where attacker-controlled numeric query/queries filter values are escaped with mysqli_...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

CVE-2026-40524

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the getgltransactions function where the filtertype parameter is concatenated directly into a SQL IN clause without parameterization. Attackers with SAGLANALYTIC permission can inject arbitrary SQL by supplying a closing...

CVE-2026-47378: Authorization Bypass Through User-Controlled Key

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, Public shared-view endpoints exposed values from columns that the view owner had hidden, via three independent paths: groupBy returned raw values for any column named in the request, filter and sort arrays operated on...

EUVD-2026-37552

The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1. The listingloadmore AJAX handler accepts a filteredquery parameter that is intentionally excluded from the HMAC query signature check to support front-end filter integration. However,...

CVE-2026-12360

The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1. The listingloadmore AJAX handler accepts a filteredquery parameter that is intentionally excluded from the HMAC query signature check to support front-end filter integration. However,...

CVE-2026-45418 ClipBucket: Blind SQL Injection in subtitle_edit.php

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 132, any authenticated user who can upload videos can add multiple subtitles from different files and change their title English, Spanish.... The POST /actions/subtitleedit.php request used to change their title...

PT-2026-48792

Name of the Vulnerable Software and Affected Versions ClipBucket v5 versions prior to 5.5.3 Description An authenticated user with video upload privileges can exploit a boolean-based blind SQL injection, a technique where data is exfiltrated by observing true or false responses from the server. T...

Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher STARTING, ENDING, or CONTAINING in Query By Example QBE. An attacker can supply wildcard characters to perform boolean-based blind data inference. Affected versions: Spring Data...

VMware Spring Data Relational 安全漏洞

VMware Spring Data Relational is a relational database access framework developed by VMware, Inc. There is a security vulnerability in VMware Spring Data Relational, which stems from the improper escaping of external control inputs when using StringMatcher in Query By Example. Attackers can use...

Exploit for CVE-2026-79303

CVE-2026-79303 Boolean-blind SQL injection Description...

Exploit for CVE-2026-00000

CVE-2026-00000 Boolean-blind SQL injection Description...

CVE-2017-20246 KittyCatfish 2.2 Plugin for WordPress SQL Injection

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can inject SQL code through the 'kcad' parameter in base.css.php or kittycatfish.php to extract sensiti...

CVE-2017-20246 KittyCatfish 2.2 Plugin for WordPress SQL Injection

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can inject SQL code through the 'kcad' parameter in base.css.php or kittycatfish.php to extract sensiti...

PT-2026-47769

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can inject SQL code through the 'kc ad' parameter in base.css.php or kittycatfish.php to extract...