CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit 사용 예시 기본 사용법 python3 exploit.py https://target.example.com -e [email protected] 웨비나 페이지 지정 python3 exploit.py https://target.example.com -e [email protected] -w https://target.example.com/webinar/my-webinar/ Verbose 모드 python3...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 PHPGurukul Men Salon Management System 2.0 저장소에 오신 것을 환영합니다. 이 프로젝트는 남성 살롱 관리를 위한 강력한 시스템을 제공하는 것을 목표로 합니다. 보안 취약점 CVE-2024-30998 설명: 'email' 매개변수를 통한 SQL Injection에 취약합니다. 영향받는 버전: 2.0 영향: 공격자가 'email' 매개변수를 조작하여 잠재적으로 무단 액세스 권한을 얻을 수 있습니다. 해결 방법: 적절한 입...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated

CVE-2022-40348: Intern Record System - 'name' 및 'email' 크로스 사이트 스크립팅 인증되지 않은 XSS Exploit 제목: Intern Record System - 'name' 및 'email' 크로스 사이트 스크립팅 인증되지 않은 XSS 날짜: 2022-06-09 Exploit 제작자: Hamdi Sevben 공급업체 홈페이지: https://code-projects.org/intern-record-system-in-php-with-source-code/ 소프트웨어 링크:...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - 'email' 매개변수의 SQL 인젝션 취약점 'savestaff' 작업 중 설명 : Customer Support System 버전 1에 SQL 인젝션 취약점이 존재합니다. 악의적인 공격자는 취약한 매개변수 'email'을 통해 직원 사용자를 생성/편집할 때 MySQL 데이터베이스에 SQL 명령을 주입할 수 있습니다. 취약한 제품 버전 : Customer Support System 1.0 CVE 작성자 : Geraldo Alcântara 날짜 :...

CVE-2025-51411

🛡️ CVE 공개: CVE-2025-51411 — Institute-of-Current-Students의 반사형 XSS 공개 날짜: 2025년 7월 25일 CVE ID: CVE-2025-51411 심각도: 중간MEDIUM CVSS 6.1 🧩 요약 Institute-of-Current-Students v1.0 프로젝트, 특히 postquerypublic 엔드포인트에 반사형 사이트 간 스크립팅XSS 취약점이 존재합니다. email 매개변수의 정화되지 않은 입력이 응답 HTML에 직접 반영되어, 공격자가 악성 링크를 방문하거나 조작된...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the email parameter in the Check Email function. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

CVE-2024-34327

CVE-2024-34327 SQL Injection Vulnerability Checker This script V-24-02-001SQLiCheck.py is a proof-of-concept PoC tool to verify the presence of a time-based blind SQL injection vulnerability affecting the password-reset-token.php endpoint, identified as CVE-2024-34327. ⚠️ Disclaimer This tool is...

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - 未認証SQLインジェクション 説明: WordPress用プラグインRSVPMarkerは、バージョン10.6.6以前において、'email'パラメータを介したSQLインジェクションに対して脆弱です。ユーザーが指定したパラメータに対するエスケープ処理が不十分であり、既存のSQLクエリに対する十分な準備処理が欠如していることが原因です。この脆弱性により、認証されていない攻撃者が既存のクエリに追加のSQLクエリを付加し、データベースから機密情報を抽出することが可能になります。 Severity: critical CV...

cve-2023-22515-exp

cve-2023-22515-exp cve-2023-22515의 python 익스플로잇 스크립트 매개변수는 다음과 같습니다: -h, --help show this help message and exit -H HOST, --host HOST 指定url -U USERNAME, --username USERNAME 指定用户名 -PW PASSWORD, --password PASSWORD 指定密码 -E EMAIL, --email EMAIL 指定邮箱 -P PROXIES, --proxies PROXIES 指定代理...

CVE-2026-93988

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-90846

CVE-2026-90846 is an SQL injection vulnerability in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/forgot-password.php . The email/contactno parameter is not properly sanitized, allowing a remote, unauthenticated attacker to inject SQL. The exploit has been publicly ...

CVE-2026-90844

PHPGurukul Daily Expense Tracker System 1.1 is affected by a SQL injection vulnerability in the Login component, specifically in the file /dets/index.php. The flaw is triggered by manipulating the email argument, allowing remote unauthenticated exploitation over the network. The CVSS v3.1 base sc...

CVE-2026-90844 PHPGurukul Daily Expense Tracker System Login index.php sql injection

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-86268

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file UserLogin.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-86268 itsourcecode School Management System User_Login.php sql injection

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file UserLogin.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

EUVD-2026-72244

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file UserLogin.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-86226 Projectwolds Online Attendance System profile.php cross site scripting

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...