PT-2025-50761

Name of the Vulnerable Software and Affected Versions xbtitFM version 4.1.18 Description The software contains an unauthenticated SQL injection issue. Remote attackers can manipulate database queries by injecting malicious SQL code through the msgid parameter. Crafted requests sent to the...

CVE-2024-58309: Improper Neutralization of Special Elements used in an SQL Command

xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting malicious SQL code through the msgid parameter. Attackers can send crafted requests to /shoutedit.php with EXTRACTVALUE functions to extract database...

Twitter-Clone 1 SQL Injection

Exploit Title: Twitter-Clone 1 - 'code' SQL Injection Date: 2018-08-22 Exploit Author: L0RD Vendor Homepage: https://github.com/Fyffe/PHP-Twitter-Clone/ Version: 1 CVE: N/A Tested on: Win 10 vulnerable files : mailactivation.php , stalkers.php , search.php vulnerable parameters : name , code , id...

NodAPS 4.0 - SQL injection Cross-Site Request Forgery

NodAPS 4.0 - SQL injection Cross-Site Request Forgery Exploit Title: Online Booking system - NodAPS 4.0 - 'search' SQL injection / Cross-Site Request Forgery Date: 2018-05-16 Exploit Author: Borna nematzadeh L0RD Vendor Homepage:...

PHIMS - Hospital Management Information System - Password SQL Injection

PHIMS - Hospital Management Information System - Password SQL Injection Exploit Title: PHIMS - Hospital Management Information System - 'Password' SQL Injection Dork: N/A Date: 2018-02-16 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage:...

Joomla! Component Recipe Manager 2.2 - id SQL Injection

Joomla! Component Recipe Manager 2.2 - id SQL Injection Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Easy Web Search 3 - 'id' Parameter SQL Injection

No description provided by source. !/usr/bin/python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re import random import hashlib class TestPOCPOCBase: name = "Easy Web Search 3 - 'id' Parameter SQL Injection"...

PHPback 'orderby' parameter SQL injection vulnerability

PHPback is an open source web application feedback system that provides users with feedback on issues and suggestions to help improve the site. A SQL injection vulnerability exists in PHPback version 1.3.0. An attacker can exploit the vulnerability by constructing a SQL statement containing the...

PHPBack 1.3.0 - SQL Injection

PHPBack 1.3.0 - SQL Injection / + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-v1.3.0-SQL-INJECTION.txt Vendor: ================ www.phpback.org Product: ================ PHPBack v1.3.0 Vulnerability Type: ===================...

kppw 最新版前台无条件sql注入一枚

简要描述： rt 详细说明： /www/lib/inc/CommonClass.php public static function changehongbao$taskid,$moneys,$uid,$money,$title,$g $result=dbfactory::getone'select from '.TABLEPRE.'witkeyspace where uid='.$uid; if$g $newbalance=$result'balance'-$money+$moneys; dbfactory::query'update '.TABLEPRE.'witkeyspace s...

shopnc o2o版三处SQL注入打包

简要描述： 直接出数据 详细说明： 先来五个互联网实例 http://www.0795hui.com/circle/index.php?act=api&op=getthemelist&datacount=1%20procedure%20analyseextractvaluerand,concat0x3a,user,1 http://www.hfmy.cc/modules/circle/index.php?act=api&op=getthemelist&datacount=1%20procedure%20analyseextractvaluerand,concat0x3a,user,1...

Oracle database XXE injection vulnerabilities(CVE-2 0 1 4-6 5 7 7)analysis-vulnerability warning-the black bar safety net

In this article, we will jointly analyze the Oracle database XXE injection vulnerabilitiesCVE-2 0 1 4-6 5 7 7, Oracle Corporation 1 month 2 0 day was released for the vulnerability related to the patch. About XXE relevant knowledge, you can view the security pulse of the station within other...

Ecmall V2.3.0-UTF8 正式版SQL注入漏洞(绕过过滤)

简要描述： 打了最新的补丁 详细说明： 漏洞http://wooyun.org/bugs/wooyun-2010-065284 绕过方法： updatexml函数 extractvalue函数 漏洞证明： url: http://localhost/ecmall/index.php?app=myshipping&act=edit&shippingid=1 payload1: shippingname=li&shippingdesc=asd&irstprice=10&stepprice=0&enabled=1&sortorder=255&codregions1' or...

CVE-2009-0819: Undefined Security Weakness

sql/itemxmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service crash via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue or UpdateXML," which triggers an assertion failure...