CVE-2023-23488-PoC

CVE-2023-23488-PoC Unauthenticated SQL Injection - Paid Memberships Pro 2.9.8 WordPress Plugin Running this script against a WordPress instance with Paid Membership Pro plugin tells you if the target is vulnerable. As the SQL injection technique required to exploit it is Time-based blind, instead...

CVE-2025-11391

Неаутентифицированная Blind SQL-инъекция в PPOM для WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res; Неаутентифицированный злоумышленник может воспользоваться этой уязвимостью, создав вредоносную полезную нагрузку и внедрив её в параме...

CVE-2026-36670

CVE-2026-36670 Эксплойт для слепой SQL-инъекции на основе времени в панели управления OpenSIPS. Этот эксплойт использует аутентифицированную уязвимость SQL-инъекции в модуле aliasmanagement.php проекта opensips. GET-параметр table некорректно санитизируется, что позволяет атакующему внедрить...

CVE-2024-10355

Исходный код Бесплатная загрузка ПО для управления АЗС | SourceCodester Описание Уязвимость SQL-инъекции в Petrol pump management software v1.0 от sourcecodester. Была обнаружена уязвимость, оцениваемая как высокорискованная, затрагивающая некоторую неизвестную функциональность файла...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - Unauthenticated SQL Injection Description The Subscribe to Category plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

CVE-2019-9053-Fixed

The user assumes all responsibility for any action taken using this tool. If these terms are not acceptable to you, please do not use this tool. Use it only in environments where you are permitted to perform pentesting activities Bug fixes for the CVE-2019-9053 exploit Some bug fixes for the...

CVE-2024-50971

CVE-2024-50971 Description A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code Base:...

CVE-2024-24137

CVE-2024-24137: Student File Managment System SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

CVE-2024-34310

CVE-2024-34310 CVE-2024-34310 Suggested description Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter. Vulnerability Type SQL Injection Vendor of Product https://www.bjjfsd.com/ Affected Product Code Base Jin Fang times...

CVE-2024-50970

CVE-2024-50970 Description A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...

CVE-2021-41511

CVE-2021-41511 Exploit Title: Lodging Reservation Management System 1.0 - SQL Injection / Authentication Bypass Exploit Author: Nitin Sharmavidvansh Vendor Homepage: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html Software Link:...

CVE-2024-4295-Poc

CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Suggested description JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection Additional Information...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC Additional Information https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md Vulnerability Type SQL Injection Vendor of Product the development group Affected Product Code Base https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0...

CVE-2024-13479

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 3.2.4 - Unauthenticated SQL Injection Description The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.2.4 due to...

CVE-2024-13481

CVE-2024-13481 LTL Freight Quotes – R+L Carriers Edition = 3.3.4 - Неаутентифицированная SQL-инъекция Описание Плагин LTL Freight Quotes – R+L Carriers Edition для WordPress уязвим к SQL-инъекции через параметры 'editid' и 'dropshipeditid' во всех версиях до 3.3.4 включительно из-за недостаточног...

CVE-2024-10354

Исходный код Petrol pump management software free download | SourceCodester Описание Уязвимость SQL-инъекции в sourcecodester Petrol pump management software v1.0. Обнаружена уязвимость, оцененная как высокая степень риска, затрагивающая некоторую неизвестную функциональность файла admin\print.ph...

CVE-2024-54292

CVE-2024-54292 Appsplate = 2.1.3 - Неаутентифицированная SQL-инъекция Описание Плагин Appsplate для WordPress уязвим к SQL-инъекциям в версиях до 2.1.3 включительно из-за недостаточного экранирования параметра, предоставляемого пользователем, и отсутствия достаточной подготовки существующего...

CVE-2025-26198

🛡️ CVE Disclosure: CVE-2025-26198 — SQL Injection in CloudClassroom-PHP-Project Disclosure Date: 18 June 2025 CVE ID: CVE-2025-26198 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in CloudClassroom-PHP-Project v1.0, specifically within the loginlinkadmin.php...