CVE-2019-13027

CVE-2019-13027 Details for disclosing CVE-2019-13027 Vendor contact timeline: 1st July 2019 - No response, no email back. 4th July 2019 - No response, no email back. 8th July 2019 - Email sent, Github created. 11 July 2019 - No Vendor response. Vuln disclosed. Vulnerability Type SQL Injection...

CVE-2026-67401

CVE-2026-67401 SQL injection in cPanel EmailTrack. Authenticated cPanel user with mail privileges writes arbitrary files as root via SQLite ATTACH DATABASE. One request to root. Haven't tested on a real target, code is only put together from public information and basic diff'ing. Do your due...

CLEANSTART-2024-UR02619 SQL injection issue in color

Security vulnerability affects the cacti package. A SQL injection issue in color...

CVE-2026-119619

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

CVE-2026-115820

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'columns array keys' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-79387-PbootCMS-SQL-Injection

CVE-2026-79387: SQL Injection in PbootCMS V3.2.5 User Management Module Overview Field| Detail ---|--- CVE ID| CVE-2026-79387 Product| PbootCMS Affected Versions| 3.2.0 – 3.2.5, and possibly earlier Vulnerability Type| SQL Injection CWE-89 Attack Vector| Remote Authenticated CVSS Severity| High...

CMS-made-simple-sqli-python3

CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQL Injection rewritten for python3, CVE-2019-9053 I found it problematic to run this exploit on kali linux, since python2 doesn't have termcolor, so with very few brackets I made it working with python3. All credit goes to:...

php2shell-pmb-poc

php2shell → PMB: unauthenticated RCE chain Authorized penet...

CVE-2024-40498

CVE-2024-40498 Affected Application online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Description The file register.php handles user registration. At line 117, the POST parameters "$address1" and $address2" are unsanitized, unlike the e-mail,...

CVE-2017-8917

CVE-2017-8917 CVE-2017-8917 - Joomla 3.7.0 'comfields' SQL Injection. Dependencies : pip install art pip install beautifulsoup4 Exploit : python cve20178917.py...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - SQL Injection in Online Shopping System Advanced Summary A critical SQL Injection vulnerability was discovered in the Online Shopping System Advanced project by PuneethReddyHC. The flaw resides in action.php, which fails to properly sanitize user input from the...

CVE-2025-32429-Checker

CVE-2025-32429 Vulnerability Checker A Python-based vulnerability scanner for detecting CVE-2025-32429 SQL injection vulnerability in XWiki platforms. Features Single Target Scanning : Check individual targets with -t option Bulk Scanning : Scan multiple targets from a file with -l option WAF...

EUVD-2026-114228

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'columns array keys' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-115820 Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameter

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'columns array keys' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-115820

The Majestic Support plugin for WordPress is vulnerable to a SQL Injection flaw in versions up to and including 1.2.2 . The root cause is insufficient escaping and a lack of proper preparation on the user-supplied 'columns (array keys)' parameter. This allows authenticated attackers with Subscrib...

CVE-2026-115820 Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameter

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'columns array keys' parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-119619 37954679 cak-filemanagement-system save_student.php mysqli_query sql injection

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

CVE-2026-119619

The cak-filemanagement-system (up to version 5e6433246475e66462e1fea980688de96a049297) is vulnerable to a SQL injection via the mysqli_query function in the admin/save_student.php file. An attacker can remotely trigger this vulnerability by manipulating the date, department, subject, forwarded_to...

CVE-2026-119619 37954679 cak-filemanagement-system save_student.php mysqli_query sql injection

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

EUVD-2026-114257

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...