CVE-2022-26120

Multiple improper neutralization of special elements used in an SQL Command 'SQL Injection' vulnerabilities CWE-89 in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP...

CVE-2017-20130

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

Ambit Technologies iTech Dating Script SQL注入漏洞

Ambit Technologies iTech Dating Script is a standalone PHP based software script by Ambit Technologies India. It provides users with an excellent experience when looking for a date! A security vulnerability exists in Ambit Technologies iTech Dating Script version 3.26, which stems from the presen...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...

Vulnerabilities fixed in SAP products

Vulnerabilities have been fixed in several SAP products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Bypassing authentication Bypassing security measure SQL...

KB Affiliate Referral Script SQL注入漏洞

KB Affiliate Referral Script is a 3-tier referral system by Kunal Bansal Personal Developer. A security vulnerability exists in KB Affiliate Referral Script version 1.0, which can be exploited to cause a sql injection by typing the username/password parameters into the /index.php file. The attack...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Copied from Original: - ht...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...

Agile Point SQL注入漏洞

Agile Point is Agile Point's solution for automating business processes and workflows and building custom applications, portals and SaaS solutions. Agile Point suffers from a SQL injection vulnerability. The vulnerability stems from the lack of validation of the EncodedData parameter in the...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...

Advantech iView SQL注入漏洞

Advantech iView, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which results from the use of special elements in SQL commands that are not...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

POC - Atlassian Confluence OGNL Injection Remote Code Executio...

CVE-2022-32391

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/viewaction.php:4...

Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb

CVE-2022-22980 A local based poc of CVE-2022-22980, for the d...

Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

「💥」CVE-2022-26134 Description In affected versions of Con...

CVE-2019-12352

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendmail.php when the attacker has dlsprint authority via a dlid cookie...

CVE-2019-12357

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/inventory/index.php?view=edit & id=Lack of validation of external input SQL statemen...

Rescue Dispatch Management System SQL注入漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system version 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform sql injection and steal data...