CVE-2026-105246

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

joomla.3.7.0exploit

CVE-2017-8917 PoC de SQLi en Joomla Este repositorio contiene un proof of concept PoC simple y apto para CTF para la vulnerabilidad de inyección SQL comfields de Joomla CVE-2017-8917. El objetivo es mantener el flujo de trabajo ligero mientras se muestra el flujo completo de explotación: detecció...

CVE-2026-105247 SourceCodester Online Reviewer Management System btn_functions.php course sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

EUVD-2026-92273

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105247

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a remote SQL injection vulnerability. The flaw exists in an unknown function within the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course . An attacker can trigger the vulnerability by manipulating...

CVE-2026-105246

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to an SQL injection vulnerability within the /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update file. An attacker can initiate this attack remotely by manipulating the Subject argument. The vulnerability al...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

EUVD-2026-92266

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-Vulnerabilidad-de-Inyección-SQL Autor del Exploit: ersinerenler Página web del proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2024-57430

CVE-2024-57430 Una vulnerabilidad de inyección SQL en la función pjActionGetUser de PHPJabbers Cinema Booking System v2.0 permite a los atacantes manipular consultas de la base de datos a través del parámetro column. Explotar esta falla puede provocar divulgación no autorizada de información,...

CVE-2023-49970

CVE-2023-49970 Customer Support System 1.0 - 在"saveticket"操作期间"subject"参数存在SQL注入漏洞 描述 ：Customer Support System 1.0版本存在SQL注入漏洞。恶意攻击者在创建/编辑工单时，可通过易受攻击的参数“subject”向MySQL数据库发送SQL命令。 受影响产品版本 ：Customer Support System 1.0 CVE作者 ：Geraldo Alcântara 日期 ：2023年11月28日 确认日期 ：2023年12月19日 CVE编号 ：CVE-2023-49970...

CVE-2026-105232

A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the...

CVE-2026-105231

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

CVE-2026-105230

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...

Wp2Shell

wp2shell Ejecución remota de código sin autenticación en el núcleo de WordPress. CVE-2026-60137 Inyección SQL en WPQuery encadenada con CVE-2026-63030 Confusión de ruta de lotes en la API REST. Solo para fines educativos e investigación de seguridad autorizada. Versiones afectadas WordPress 6.9.0...

CVE-2025-66417-POC

CVE-2025-66417 POC CVE-2025-66417 POST /front/inventory.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate, br Accept: text/html Connection: keep-alive Content-Type: text/xml Content-Length: 429 getparams...

CVE-2014-9173

CVE-2014-9173: Google Document Embedder - Explotación de Inyección SQL Ciega Basada en Tiempo Autor: ratiros01 PoC original: https://www.exploit-db.com/exploits/35371...

pharmacy-sqli-CVE-2026-7392

Sistema de Ventas e Inventario de Farmacia 1.0 - Inyección SQL CVE-2026-7392 SourceCodester Sistema de Ventas e Inventario de Farmacia V1.0 versión PHP/MySQL pura CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier parámetro id Tipo : Inyección SQL CWE-89 CVSS 3.1 : 6.3 Medio Autor :...

CVE-2026-105232 kishor-23 food-waste-management-system Registration deliverysignup.php sql injection

A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the...