CVE-2024-41640

描述 AML Surety Eco 版本 3.5 及更早版本受一个未经认证的反射型跨站脚本漏洞影响。 目标 Web 应用在专用错误页面中处理错误（无需任何认证即可访问），该页面包含一个 URL 参数，未对用户输入进行清理。所提供的参数值被 Web 应用直接反射，导致恶意 payload 在受害者的浏览器中执行 JavaScript 代码。 风险 严重性：中危 CVSS v3.1 分数：5.4 CVSS v3.1 向量：AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L 受影响资源 版本：AML Surety Eco v3.5 及更早版本...

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 多个SQL注入漏洞 - studentform.php 和 classform.php 描述 ：Simple Student Attendance System v.1.0 存在多个SQL注入漏洞，可被认证攻击者利用。这些漏洞存在于 studentform.php 和 classform.php 中，允许通过 'id' 参数执行任意SQL命令。 受影响产品版本 ：Simple Student Attendance System v.1.0 CVE作者 ：Geraldo...

CVE-2024-34226

访客管理系统 1.0 提交者：Kha Do 漏洞 SQL注入 描述 SourceCodester Visitor Management System 1.0 中的 /php-sqlite-vms/?page=managevisitor&id=1 存在 SQL 注入漏洞，攻击者可通过 id 参数执行任意 SQL 命令。 受影响组件 路径 URL：/php-sqlite-vms/?page=managevisitor&id=1 参数：& id=在此注入 影响 该漏洞允许攻击者通过 id 参数执行任意 SQL 命令 POC 当使用错误条件 1' and '1'='2 搜索国家时，未返回任何结果...

FOXCMS-CVE-2025-29306-POC

FOXCMS 参数注入 RCE – CVE-2025-29306 本仓库包含一个基于 Python 的 PoC，可复现影响 FOXCMS v1.2（一款中文开源内容管理系统）的远程代码执行（RCE）漏洞。 CVE 编号：CVE-2025-29306 影响版本：FOXCMS v1.2 类型：服务参数注入 → 代码执行 漏洞概述 FOXCMS 在 /images/index.html 端点的 id 参数中使用了不安全的参数解析机制。攻击者可利用 $@print 表达式注入载荷，从而导致 PHP 代码执行。 PoC 使用方法 环境要求 Python 3.x requests 库...

CVE-2024-10355

源码 Petrol pump management software free download | SourceCodester 描述 sourcecodester Petrol pump management software v1.0 存在 SQL 注入漏洞。该漏洞被评为高风险，影响 admin\invoice.php 文件的某些未知功能。攻击者可以利用参数 id 构造恶意 SQL 语句来获取敏感信息，从而造成危害。 漏洞分析 admin\invoice.php 此处，用户输入 $POST'id' 被直接拼接到 SQL 查询语句中，显然容易受到 SQL 注入攻击。 漏洞复现...

CVE-2026-91004

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2026-15758

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data...

CVE-2026-91004 SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2026-91004

A SQL injection vulnerability exists in SourceCodester Online Faculty Clearance System 1.0 , specifically in the /delete_faculty1.php file. An unauthenticated remote attacker can manipulate the ID parameter to inject arbitrary SQL, potentially leading to low-impact confidentiality, integrity, and...

EUVD-2026-78283

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet 医院管理系统 2024 存在不安全的直接对象引用 IDOR 漏洞。 PoC 该漏洞存在于系统通过 /Modernanet/LAUDO/LAU0000100/Laudo?id= URL 处理用户数据访问的过程中。通过操纵此 id 参数，攻击者能够获取敏感的医疗信息。 http://IP/Modernanet/LAUDO/LAU0000100/Laudo?id=NUMBER 你无需登录即可查看结果。 额外信息 由于该 IDOR 可获取到弱凭证，因此有可能利用这些凭证访问该医院的用户账户。 参考...

Contact Form Generator <= 2.5.5 - Cross-Site Scripting

The Contact Form Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in wp-admin/admin.php in versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

YesWiki Bazar Widget - Reflected XSS via 'id' Parameter

YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using striptags only. striptags does not escape double quotes, allowing an attacker to break out of the data-formid attribute and inject arbitrary event handlers. id: CVE-2026-52774 info: name: YesWiki Bazar Widget ...

CVE-2026-15758

The 3D FlipBook WordPress plugin (PDF Embedder, Flipbook Viewer, Image Gallery) is vulnerable to sensitive information exposure in all versions up to and including 1.16.20 . Unauthenticated attackers can exploit the 'id' parameter to extract the full metadata payload of password-protected flipboo...

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example CVE-2022-22980 環境 Docker 環境の構築 root@kitploit: docker build -t mongo . docker run -dit -p 6666:6666 mongo Poc root@kitploit: ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

CVE-2023-49989

CVE-2023-49989 Hotel Booking Management v1.0 - 位于 update.php 中 "id" 参数的 SQL 注入漏洞 描述 ：Hotel Booking Management v1.0 被发现存在通过 update.php 中 id 参数的 SQL 注入漏洞。 受影响的产品版本 ：Hotel Booking Management v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认日期 ：19/12/2023 CVE ：CVE-2023-49989 测试环境 ：Windows 复现步骤：...

CVE-2026-90876

A SQL injection vulnerability affects SourceCodester Online Faculty Clearance System 1.0 , specifically in the file /delete_requirement.php through manipulation of the ID parameter. The vulnerability can be exploited remotely with no authentication and low complexity , yielding a CVSS 3.1 base sc...

EUVD-2026-78262

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-90855

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - 通过“id” URL参数在 editcustomer 中的 SQL 注入漏洞 描述 ：Customer Support System 版本 1 存在 SQL 注入漏洞。具有恶意意图的攻击者可以在编辑客户时，通过操纵 'id' URL 参数来对 MySQL 数据库执行 SQL 命令。 受影响的产品版本 ：Customer Support System 1.0 CVE 作者 ：Geraldo Alcântara 日期 ：2023年11月28日 确认时间 ：2023年12月19日 CVE...