CVE-2026-101105

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...

CVE-2026-101108

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

CVE-2026-100752

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager Free 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries category browsing, search results, and the full property listing from a request-controlled...

CVE-2024-1512

CVE-2024-1512 개념 증명 취약점 개요 CVE-2024-1512는 MasterStudy LMS WordPress 플러그인, 특히 /lms/stm-lms/order/items REST 경로의 구현에서 중요한 취약점을 노출합니다. 이 문제는 플러그인이 'user' 매개변수를 적절히 이스케이프하지 못하고 SQL 쿼리를 부적절하게 준비한 데서 발생합니다. 결과적으로 공격자는 'user' 매개변수를 조작하여 쿼리에 악성 SQL 코드를 삽입할 수 있습니다. 이 취약점은 UNION 기반 SQL 인젝션 공격을 용이하게 하며, 공격자...

Exploit-Joomla

ep4-redes Joomla! 3.7.0의 CVE-2017-8917 SQL 인젝션 취약점 익스플로잇 취약점에 대한 설명: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html...

cve-2025-57819-exploit

CVE-2025-57819 익스플로잇 메타데이터 심각도: 치명적 9.8 벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 유형: 인증되지 않은 SQL 인젝션 → 원격 코드 실행 영향받는 소프트웨어: FreePBX endpoint 모듈 매개변수 : 대상 호스트명 또는 IP 주소 취약한 FreePBX 인스턴스 : 리버스 쉘 콜백을 위한 공격자 IP 주소 : 수신 연결을 위한 리스닝 포트 예시: python3 cve-2025-57819.py freepbx.local 10.10.16.38 9999...

drupal-jsonapi-sqli-scanner

CVE-2026-9082 — Drupal PostgreSQL SQLインジェクション マススキャナー＆エクスプロイテーションツール Drupal Core における未認証SQLインジェクション（PostgreSQL） PDOプレースホルダー名の悪用による JSON:API フィルター配列キーインジェクション 概要 CVE-2026-9082 は、Drupal 8.0 から 11.3.9 を実行している PostgreSQL バックエンド のすべてのサイトに影響を与える、Drupal Core の重大（Highly...

wp2shell

wp2shell — WordPress 코어 사전 인증 RCE CVE-2026-63030 배치 라우트 혼동, CVSS 7.5 + CVE-2026-60137 SQL 인젝션, CVSS 9.1 플러그인이나 특별한 구성이 필요 없으며 기본 설치에서도 동작하는 WordPress 코어의 사전 인증 원격 코드 실행 체인입니다. 영향을 받는 버전 버전 범위| 영향| 수정 버전 ---|---|--- WordPress 7.0.0 – 7.0.1| 전체 RCE| 7.0.2 WordPress 6.9.0 – 6.9.4| 전체 RCE| 6.9.5...

RedTeamBrasil-CVE-2025-64459

connector-sqli Django ORM의 SQL 인젝션 자동 익스플로잇 Q-object connector · CVE-2025-64459 🎥 RedTeam Brasil 채널 — 포르투갈어로 실전 공격 보안. ██████╗ ████████╗██████╗ connector-sqli ██╔══██╗╚══██╔══╝██╔══██╗ Django Q connector SQLi ██████╔╝ ██║ ██████╔╝ CVE-2025-64459 ██╔══██╗ ██║ ██╔══██╗ RedTeam Brasil 채널 ██║ ██║ ██║...

EUVD-2026-88436

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110

The Book Library (Free) Joomla Extension by ordasoft.com (versions

CVE-2026-101110 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-100752 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager Free 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries category browsing, search results, and the full property listing from a request-controlled...

CVE-2026-100752 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager Free 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries category browsing, search results, and the full property listing from a request-controlled...

EUVD-2026-88434

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager Free 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries category browsing, search results, and the full property listing from a request-controlled...

CVE-2026-100752

The Joomla Extension - ordasoft.com - Real Estate Manager (Free) version

CVE-2026-101108

The Vehicle Manager (Free) Joomla extension by ordasoft.com is vulnerable to an unauthenticated SQL Injection in versions prior to 6.5.8 . The flaw exists in site/vehiclemanager.php, where the order_field and order_direction parameters are processed at three frontend entry points (category listin...

CVE-2026-101108 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

EUVD-2026-88432

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...