cve-2025-9933

🔒 관리자 패널 자격 증명 Username: admin Password: Test@123 Username: [email protected] Password: Test@123 또는 새 사용자 등록. 설명 PHPGurukul Beauty Parlour Management System 1.1에서 취약점이 발견되었습니다. 이 문제는 파일 /admin/view-appointment.php의 알려지지 않은 기능에 영향을 미칩니다. viewid 인수를 조작하면 SQL 인젝션이 발생합니다. 공격은 원격으로 시작될 수 있습니다...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 인증되지 않은 SQLi 및 로그인 우회 CVE-2024-25227 날짜: 23/02/2024 테스트 대상: ABO.CMS 5.8 공급업체: ABO.CMS 공급업체 URL:https://abocms.ru ABO.CMS 5.8은 관리자 로그인 페이지의 tblogin 매개변수를 통한 SQL 인젝션에 취약합니다. 영향을 받는 구성 요소는 관리자 로그인 페이지의 "tblogin" 매개변수입니다. 다른 에디션에서도 취약할 가능성이 높습니다. 공격 유형은 원격이며, 공격 벡터는...

FreePBX-Multiple-CVEs-2025

FreePBX-Multiple-CVEs-2025 이 저장소는 FreePBX에서 발견된 세 가지 보안 취약점CVE-2025-66039, CVE-2025-61678, CVE-2025-61675을 문서화하며, 보안 연구 및 인식 제고를 위한 분석, 영향, 개념 증명PoC 세부 정보를 포함합니다. CVE 설명 🔴 CVE-2025-61675 사용자가 제어하는 입력을 부적절하게 처리하여 발생하는 FreePBX의 보안 결함입니다. 이 문제로 인해 공격자가 애플리케이션 기능에 영향을 미치고 잠재적으로 전체 시스템 보안에 피해를 줄 수 있습니...

EUVD-2026-90809

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-62059 WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-62059 WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-62059

The Ultimate Member WordPress plugin (versions

CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

CVE-2026-62060

The WordPress Captivate Sync plugin (versions

EUVD-2026-90808

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Captivate Sync versions = 3.3.2...

WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ultimate Member versions = 2.13.1...

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956 の PoC。ValvePress Automatic プラグインの SQL インジェクションです。この PoC は脆弱性を悪用して、ターゲットにユーザーを作成し、管理者権限を付与します。WordPress で管理者になると、リモートコード実行 RCE につながる可能性があります。 使い方 git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py http://target.com...

CVE-2026-102379

The BuildKit – Product Builder for WooCommerce – Custom PC Builder WordPress plugin (versions ≤ 1.0.28 ) is vulnerable to a Blind SQL Injection due to the improper neutralization of special elements used in an SQL command. This vulnerability, identified in the woo-product-builder component, allow...

CVE-2026-102379 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC...

CVE-2026-102379 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC...

EUVD-2026-90803

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC...

WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability

SQL Injection vulnerability discovered by cazy in WordPress Plugin BuildKit – Product Builder for WooCommerce – Custom PC Builder versions = 1.0.28...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...