CVE-2022-23387

An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field...

CVE-2022-23387: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field...

PT-2022-15968

Name of the Vulnerable Software and Affected Versions taocms version 3.0.2 Description The issue is a SQL blind injection that can obtain database data through the Comment Update field. This allows unauthorized access to database information. Recommendations For taocms version 3.0.2, consider...

OpenSNS SQL blind injection vulnerability (CNVD-2021-101547)

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the pid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

On the CMSMS SQL injection vulnerability in the reproduction and analysis and use-vulnerability and early warning-the black bar safety net

CMS Made SimpleCMSMSis a simple and convenient content management system which uses PHP, MySQL and Smarty template engine development, having a role-based rights management system, wizard-based installation and update mechanism, the system resources occupy less, while the included file management...

悟空CRM V0.5.4 /App/Lib/Action/FinanceAction.class.php SQL盲注

No description provided by source...

Love fast router web Management page several vulnerabilities SQL blind injection, the plaintext stored passwords-bug warning-the black bar safety net

SQL blind injection, you can bypass the web page login authentication login default user name is admin. Password admin） I tested the ip is 1 9 2. 1 6 8. 1 6 8. 1:8 0,blind the url is http://192.168.168.1/login/x The user name of the payload is -1" OR 321=6 AND 0 0 0 1 6 7=0 0 0 1 6 7 -- The...

PHP Live 3.3 Remote SQL Injection Exploit

Exploit for php platform in category web applications ========================================= PHP Live 3.3 Remote SQL Injection Exploit ========================================= !/usr/bin/perl -w Exploit Title: PHP Live 3.3 Date: 01/08/2010 Author: TA4G - email protected Vendor:...