vuln-reproductions

Vulnerability Reproduction Record Vulnerability reproduction...

shannon-defender-skill

shannondefenderskill 🛡️ Shannon Defender – Trae Solo Coder...

Ivanti Endpoint Manager（EPM） SQL注入漏洞

Ivanti Endpoint Manager is a unified endpoint management solution for the enterprise that is designed to centrally manage all types of devices including Windows, macOS, Linux, ChromeOS and IoT devices within an organization, covering OS deployment, software distribution, remote control and more. ...

WordPress plugin Ads Pro SQL 注入漏洞

WordPress Ads Pro is a multi-purpose ad management plugin, mainly used for flexible management of ad space in WordPress websites, supporting banner ad display, billing mode settings and user-friendly ad placement solutions. WordPress ads pro suffers from a SQL injection vulnerability, which stems...

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockSmtpSettings, which can be exploited by an attacker to bypass authorization contro...

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

RuvarOA 安全漏洞

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which originates from the id parameter of the /WorkFlow/wfofficefilehistoryshow.aspx file, which lacks validation of externally entered SQL statements. An attacker can exploit...

Sentrifugo SQL注入漏洞

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which originates from the lack of validation of...

PHP 缓冲区错误漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version V1.0, which stems from the application's inability to...

Exploit for Injection in Atlassian Confluence_Data_Center

MDPOCS POCs written by the Cat Egg Safety team – if you repor...

novel-plus SQL注入漏洞

novel-plus novel boutique-plus is a multi-end PC, WAP reading, functional original literature CMS system. novel-plus version 3.6.2 suffers from a SQL injection vulnerability, which originates from a problem with the file /category/list?limit=10&offset=0&order=desc, where the operation of the...

PT-2023-12424 · 狮子鱼Cms · 狮子鱼Cms

Name of the Vulnerable Software and Affected Versions: 狮子鱼CMS affected versions not specified Description: A critical issue has been found, affecting the goods detail function of the ApiController.class.php file. The manipulation of the goods id argument leads to sql injection. This issue can be...

pocsuite3_pocs

一些pocsuite3的脚本 shirokeybrute 把ShiroAttack2的检测和爆破key逻辑抠出来。用于批量测试shiro key是否可爆破。 使用步骤： 1.把shirokeys.txt放入pocsuite3\data目录 2.修改pocsuite3\lib\core\common.py setpaths函数中添加paths.SHIROKEYS = os.path.joinpaths.POCSUITEDATAPATH, "shirokeys.txt" 2.2或者直接修改poc中getwordlist函数所打开的文件地址 cve20220540 jira越权...

74cms SQL注入漏洞

74cmsSE is a free, open source professional recruiting system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from a lack of validation of externally entered SQL statements in the /home/job/index keyword parameter. An attacker could use this vulnerability to execute...

Hindu Matrimonial Script SQL注入漏洞

A security vulnerability exists in Hindu Matrimonial Script, an online marriage service website of PHP Matrimonial Script India, which can be exploited by attackers to perform SQL injection attacks...

Sourcecodester Hospital Patient Records Management System SQL注入漏洞（CNVD-2022-48746）

Sourcecodester Hospital Patient Records Management System is a Web-based application that provides hospitals with an automated platform to store and manage their patient records. Management System is vulnerable to SQL injection, which originates from /hprms/admin/?page=user/manageuser&id= page...

WordPress Bestbooks plugin SQL注入漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. stb and others are products of the WordPress Foundation. stb is a single-file public domain library for C/C. WordPress plugin is an application plugin. WordPress Bestbooks plugin 2.6....

kkcms SQL注入漏洞

kkcms is an open source video capture and playback system. The system is mainly used to automatically capture video resources and provide online playback. kkcms v1.3.7 version has a SQL injection vulnerability, the vulnerability originates from /template/wapian/vlist.php does not filter the...

dynamicMarkt SQL注入漏洞

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which is exploited by attackers to perform SQL injection...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58670）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manageuser&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...