Lucene search
K

931 matches found

Exploit DB
Exploit DB
added 2020/03/16 12:0 a.m.402 views

MiladWorkShop VIP System 1.0 - 'lang' SQL Injection

Exploit Title: MiladWorkShop VIP System 1.0 - 'lang' SQL Injection Google Dork: Powered By MiladWorkShop VIP System Date: 2020-03-03 Exploit Author: AYADI Mohamed email : [email protected] Vendor Homepage: https://miladworkshop.ir/ Software Link: https://miladworkshop.ir/vip.html Version:...

7.4AI score
Exploits0
0day.today
0day.today
added 2020/03/03 12:0 a.m.138 views

GUnet OpenEclass 1.7.3 E-learning platform - (month) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection Google Dork: intext:"© GUnet 2003-2007" Exploit Author: emaragkos Vendor Homepage: https://www.openeclass.org/ Software Link:...

0.1AI score
Exploits0
OSV
OSV
added 2020/02/27 11:15 p.m.13 views

CVE-2020-9434

opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.1CVSS6.9AI score
Exploits0References1
Cvelist
Cvelist
added 2020/02/27 10:39 p.m.24 views

CVE-2020-9434

opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3AI score0.00822EPSS
Exploits0References1
exploitpack
exploitpack
added 2020/02/14 12:0 a.m.32 views

phpMyChat Plus 1.98 - pmc_username SQL Injection

phpMyChat Plus 1.98 - pmcusername SQL Injection Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1....

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2020/02/14 12:0 a.m.84 views

phpMyChat Plus 1.98 SQL Injection

Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested on Windows 10/Kali Rolling The phpMyCh...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2020/02/14 12:0 a.m.328 views

phpMyChat Plus 1.98 - 'pmc_username' SQL Injection

Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested on Windows 10/Kali Rolling The phpMyCh...

7.4AI score
Exploits0
NVD
NVD
added 2020/01/25 8:15 p.m.15 views

CVE-2020-7981

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS10AI score0.01484EPSS
Exploits0References2
OSV
OSV
added 2020/01/25 8:15 p.m.13 views

CVE-2020-7981

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS7.9AI score
Exploits0References2
Prion
Prion
added 2020/01/25 8:15 p.m.18 views

Sql injection

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

7.5CVSS9.8AI score0.01484EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/01/25 8:15 p.m.15 views

CVE-2020-7981

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS7.2AI score0.01484EPSS
Exploits0References3
CVE
CVE
added 2020/01/25 7:18 p.m.132 views

CVE-2020-7981

The CVE-2020-7981 issue affects Geocoder (Geocoder gem) and is caused by a Boolean-based SQL injection in sql.rb prior to version 1.6.1 when within_bounding_box is used with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data. Concretely, vulnerable in Geocoder up to 1.6.0; update to 1.6.1 or newer ...

9.8CVSS9.8AI score0.01484EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/01/25 7:18 p.m.16 views

CVE-2020-7981

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS9.9AI score0.01484EPSS
Exploits0
RubySec
RubySec
added 2020/01/25 12:0 a.m.16 views

Geocoder gem for Ruby contains possible SQL injection vulnerability

sql.rb in Geocoder allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

9.8CVSS3.3AI score0.01484EPSS
Exploits0References1Affected Software1
0day.today
0day.today
added 2020/01/24 12:0 a.m.136 views

Webtareas 2.0 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Webtareas 2.0 - 'id' SQL Injection Exploit Author: Greg.Priest Vendor Homepage: http://webtareas.sourceforge.net/general/home.php Software Link: http://webtareas.sourceforge.net/general/home.php Version: Webtareas v2.0 Tested on...

0.3AI score
Exploits0
Packet Storm
Packet Storm
added 2019/12/29 12:0 a.m.129 views

Cera Intranet Community Theme 1.0.1 SQL Injection

=========================================================================================== Exploit Title: cera-intranet-community-theme SQL Inj. Dork: N/A Date: 29-12-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://themeforest.net/item/cera-intranet-community-theme/24872621 Softwar...

0.6AI score
Exploits0
Kitploit
Kitploit
added 2019/11/19 12:30 p.m.147 views

SQL Injection Payload List

SQL Injection In this section, we'll explain what SQL injection is, describe some common examples, explain how to find and exploit various kinds of SQL injection vulnerabilities, and summarize how to prevent SQL injection. What is SQL injection SQLi? SQL injection is a web security vulnerability...

8.3AI score
Exploits0References10
exploitpack
exploitpack
added 2019/11/12 12:0 a.m.35 views

CBAS-Web 19.0.0 - id Boolean-based Blind SQL Injection

CBAS-Web 19.0.0 - id Boolean-based Blind SQL Injection Exploit Title: CBAS-Web 19.0.0 - 'id' Boolean-based Blind SQL Injection Google Dork: NA Date: 2019-11-11 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link:...

8.7AI score
Exploits0
Exploit DB
Exploit DB
added 2019/11/12 12:0 a.m.177 views

CBAS-Web 19.0.0 - 'id' Boolean-based Blind SQL Injection

Exploit Title: CBAS-Web 19.0.0 - 'id' Boolean-based Blind SQL Injection Google Dork: NA Date: 2019-11-11 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/ Version: 19.0.0 Tested on:...

7.4AI score
Exploits0
0day.today
0day.today
added 2019/11/06 12:0 a.m.76 views

thejshen Globitek CMS 1.4 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: thejshen Globitek CMS 1.4 - 'id' SQL Injection Exploit Author: Cakes Vendor Homepage: https://github.com/thejshen/contentManagementSystem Software Link: https://github.com/thejshen/contentManagementSystem.git Version: 1.4 Tested...

7.4AI score
Exploits0
Rows per page
Query Builder