266016 matches found
CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions...
CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions...
CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions...
CVE-2026-108474
JetBrains Exposed versions prior to 1.5.1 are vulnerable to an SQL injection flaw. The vulnerability stems from unescaped string arguments passed to several SQL functions. This flaw allows an attacker to potentially compromise the integrity, confidentiality, and availability of the database. Reme...
hackazon
Hackazon Hackazon es un sitio de prueba vulnerable gratuito que es una tienda en línea construida con las mismas tecnologías utilizadas en las aplicaciones móviles y de cliente enriquecido actuales. Hackazon tiene una interfaz AJAX, flujos de trabajo estrictos y API RESTful utilizadas por una...
pymap
pymap — SQL injection discovery & exploitation toolkit Two co...
WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.2 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by zickzick2 in WordPress Plugin LatePoint versions = 5.7.2...
WordPress WP Directory Kit plugin <= 1.5.9 - Authenticated (Subscriber+) SQL Injection vulnerability
Authenticated Subscriber+ SQL Injection vulnerability discovered by Tarcísio Luchesi De Almeida Silva Poystick in WordPress Plugin WP Directory Kit versions = 1.5.9...
AccuKnox-DVWA-Kubernetes
DVWA on Kubernetes — Security Testing Lab 1. Project Overv...
WordPress WP Booking System – Booking Calendar plugin <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection vulnerability
Authenticated Subscriber+ SQL Injection vulnerability discovered by Spy0x7 in WordPress Plugin WP Booking System versions = 2.1.0.1...
WordPress Smart Popup by Supsystic plugin <= 1.13.2 - Authenticated (Administrator+) SQL Injection vulnerability
Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Popup by Supsystic versions = 1.13.2...
WordPress WP Ultimate CSV Importer SQL Injection Vulnerability
WordPress WP Ultimate CSV Importer 9.2 and earlier versions have a SQL injection vulnerability, which can be exploited by SQL injection attacks...
WordPress ACF Frontend Admin by DynamiApps: SQL Injection Vulnerability
WordPress ACF Frontend Admin by DynamiApps version 3.29.13 and earlier has an SQL injection vulnerability. This vulnerability can be exploited by attackers with administrator privileges, allowing them to execute SQL injections and potentially lead to the disclosure of sensitive database informati...
WordPress Booking System SQL Injection Vulnerability
The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability arises from insufficient escaping of the currentmonth parameter provided to users, as well as inadequate preparation of existing SQL queries. This leads to time-based SQL injections...
WordPress Customer Engagement System SQL Injection Vulnerability
The WordPress Customer Engagement System versions 1.13.2 and earlier have a SQL injection vulnerability. This vulnerability arises due to SQL injections via the sidx parameter. As a result of insufficient parameter escaping by users and inadequate preparation of existing SQL queries, authenticate...
Qode Tours SQL Injection Vulnerability
Qode Tours versions 3.1.3.2 and earlier have a SQL injection vulnerability, which can be exploited by subscription recipients against SQL injection attacks...
WordPress Events Manager SQL Injection Vulnerability
WordPress Events Manager versions 7.4.6 and earlier have a SQL injection vulnerability. This vulnerability stems from SQL injections by subscribers and can lead to SQL injection attacks...
WordPress FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin <= 3.1.13 - Authenticated (Author+) SQL Injection vulnerability
Authenticated Author+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin FireBox versions = 3.1.13...
