CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

CVE-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability In admin.php, the moduleaddtosite function iterates through the entire $POST array, splits the user-controllable parameter names using explode'|', ... and directly concatenates them into data/settings/themes//moduleconf.php. This file will subsequentl...

CVE-2023-39361

Cacti graphview.php Inyección SQL lleva a RCE CVE-2023-39361 WHS 3.ª generación - 남기찬7342 ChoDeokCheol Resumen Existe una vulnerabilidad en la función growrightpanetree del archivo graphview.php en el servidor Cacti 1.2.24. Al configurar el parámetro action como treecontent, existe el parámetro...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 White Hat 3rd 30th group Kim Jeongwoo Enlace de GitHub - https://github.com/custiya/geoserver-CVE-2023-25157 Resumen de la vulnerabilidad CVE-2023-25157 es una vulnerabilidad SQLi que afecta a GeoServer, una aplicación web de servicio de datos cartográficos de código...

CVE-2024-34471

CVE-2024-34471 Description: An authenticated user can abuse a Path Traversal vulnerability resulting in file deletion if has write permissions in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an...

CVE-2025-65950

CVE-2025-65950: WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups Parameter Overview Field| Details ---|--- CVE ID| CVE-2025-65950 Severity| CRITICAL Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A critical SQL Injection...

CVE-2022-46169

CVE-2022-46169 POC Este es un script de Prueba de Concepto POC para la vulnerabilidad CVE-2022-46169 que afecta a Cacti versión 1.2.22. Descripción La vulnerabilidad CVE-2022-46169 permite una inyección de comandos sin autenticación en versiones de Cacti hasta la 1.2.22, logrando así una ejecució...

exploit_CVE-2023-33831

exploitCVE-2023-33831 CVE-2023-33831 Instalación git clone https://github.com/btar1gan/exploitCVE-2023-33831 Uso automatic cd exploitCVE-2023-33831/ set your listener python3 33831.py manual nc -lvnp 1881 set your listener on code param copy the 33831.txt to repeater...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - SQL Injection Vulnerability in the "email" Parameter During "savestaff" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

CVE-2023-31717

CVE-2023-31717 Es posible realizar una inyección SQL en el parámetro id de HTTP POST pasado en el cuerpo como json, pudiendo extraer información confidencial de la base de datos SQLite. Payload - "id":"n7c734712-aabf4eb3' AND 2630=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2 AND...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

Inyección SQL Basada en Tiempo en ZoneMinder CVE-2024-51482 📌 Resumen de la Vulnerabilidad ID de CVE: CVE-2024-51482 Aviso: GHSA-qm8h-3xvf-m7j3 Versiones afectadas: ZoneMinder 1.37. hasta incluyendo 1.37.64 Versión parcheada: 1.37.65 📖 Descripción Este repositorio contiene un exploit de prueba de...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Unauthenticated SQL Injection Description The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due...

CVE-2025-51411

🛡️ CVE Disclosure: CVE-2025-51411 — Reflected XSS in Institute-of-Current-Students Disclosure Date: 25 July 2025 CVE ID: CVE-2025-51411 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the Institute-of-Current-Students v1.0 project, specifically...

SOGo_web_mail-vulnerability-CVE-2025-50340

CVE-2025-50340: Insecure Direct Object Reference IDOR vulnerability in SOGo Webmail CVE ID: CVE-2025-50340 Reporter: Milad Seddigh Product: SOGo Affected Versions: v5.6.0 Impact: Insecure Direct Object Reference IDOR vulnerability → Allows the user to send emails on behalf of another user. Summar...

CVE-2025-52097

CVE-2025-52097 – Reflected XSS in InstantForum.NET v4.1.4 This repository contains the public advisory, proof of concept, and supporting materials for CVE-2025-52097 , a reflected cross-site scripting XSS vulnerability identified in InstantForum.NET v4.1.4. Summary Product: InstantForum.NET v4.1....

cotonti-commentswidget-poc

Cotonti CommentsWidget PHP Object Injection PoC Safe local proof of concept for the PHP object injection issue identified in Cotonti's CommentsWidget implementation. Vulnerability Project: Cotonti Affected component: plugins/comments/inc/CommentsWidget.php CWE: CWE-502 — Deserialization of...

CVE-2025-4396

CVE-2025-4396 - Kit de Inyección SQL Ciega Basada en Tiempo para WordPress Relevanssi Resumen Este repositorio contiene un kit práctico de investigación y validación para CVE-2025-4396 , una Inyección SQL Ciega Basada en Tiempo sin autenticación que afecta al plugin Relevanssi de WordPress a trav...

CVE-2024-4577

CVE-2024-4577 Environment Setup Files and PHP Files --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...