251000 matches found
OpenSource-ERP-SQL-Injection
OpenSource-ERP-SQL-Injection OpenSource ERP 应用程序存在SQL注入漏洞。 CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - 获取数据库名称 POST /db/utils/query/data.xml HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64 AppleWebKit/537.36 KHTML, like Gecko...
CVE-2026-104606
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2026-104606
A security flaw exists in the itsourcecode Online Admission System Project 1.0 . An unknown function within the confirm.php file is vulnerable to SQL injection due to the improper handling of the ID argument. This vulnerability can be exploited remotely. The documents indicate that an exploit has...
EUVD-2026-91375
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2026-104606 itsourcecode Online Admission System Project confirm.php sql injection
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2026-104606 itsourcecode Online Admission System Project confirm.php sql injection
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2026-80298
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not...
POC-CVE-2026-65971
CVE-2026-65971 — 通过 sortDirection 在 Livewire PowerGrid 中实现 SQL 注入 针对 CVE-2026-65971 / GHSA-7fgc-3h6c-698r 的概念验证及完整技术文档， 这是 power-components/livewire-powergrid 中的一个 SQL 注入漏洞， 可通过公开的 Livewire 属性 sortDirection 触发。 | ---|--- CVE| CVE-2026-65971 GHSA| GHSA-7fgc-3h6c-698r 软件包|...
CVE-2026-52614
CVE-2026-52614 - RuoYi v4.8.3 filterKeyword バイパス SQLインジェクション 中文 | English 認証必須 / 許可されたテストのみ このリポジトリはセキュリティ研究および許可されたテストのみを目的としています。明示的な許可なくシステムに対して使用しないでください。 本リポジトリはセキュリティ研究と明確に許可されたテストのみを目的としています。未承認システムに対しては使用しないでください。 日本語の説明 脆弱性の概要 RuoYi v4.8.3 のコード生成モジュールにある /tool/gen/createTable...
CVE-2026-80298 SQL Injection in HAVELSAN's Sef - AI Chatbot Platform
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not...
EUVD-2026-91329
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not...
CVE-2026-80298
A SQL injection vulnerability exists in the HAVELSAN Inc. Sef - AI Chatbot Platform affecting versions before 2.1 . The flaw stems from the improper neutralization of special elements used in SQL commands, which could allow an attacker to execute unauthorized queries. The vendor has stated that t...
CVE-2026-80298 SQL Injection in HAVELSAN's Sef - AI Chatbot Platform
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not...
CVE-2026-69083_exploit
CVE-2026-69083 — SiYuan 未认证 SQL 注入 通过资产内容搜索端点，在 SiYuan（一个基于 Go 的知识库应用）中存在未认证 SQL 注入。 POST /api/search/fullTextSearchAssetContent 通过将用户控制的 query 值直接拼接进 REGEXP 子句（kernel/model/assetcontent.go，assetContentFieldRegexp）且不进行任何转义，从而构建出原始 SQL 语句： SELECT FROM assetcontentsftscaseinsensitive WHERE name...
CVE-2021-35042
CVE-2021-35042: Django SQL注入漏洞 I. 概述 Django是一个用Python编写的开源Web应用框架，基于MVC（模型-视图-控制器）模式构建。最初它是为了管理Lawrence出版集团旗下的新闻内容网站而构建的，是一个内容管理系统（CMS）软件。 Django 3.1.x至3.1.13版本以及3.2.x至3.2.5版本存在SQL注入漏洞。 导致该漏洞的原因是QuerySet.orderby中对用户控制的输入数据的过滤功能不足以防御SQL注入攻击。此漏洞可被利用，允许攻击者执行未经授权的操作，从而导致敏感数据泄露。 CVE - ID| CVE-2021-350...
CVE-2026-97634
The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
CVE-2026-12951
The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint in versions up to and including 5.0.18. This is due to insufficient escaping on the user supplied parameter and lack of...
CVE-2019-17671
＃CVE-2019-17671 ＃url + /？static = 1＆order = asc...
CVE-2026-97634 Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' Parameter
The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
EUVD-2026-91256
The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...