CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 — это уязвимость SQL-инъекции, обнаруженная в системе MODAPS проекта NASA EOSDIS, вызванная некорректной проверкой входных данных параметра category. Эта уязвимость позволяет злоумышленникам получать доступ к конфиденциальным данным и выполнять произвольные SQL-запросы через...

analise-vulnerabilidades-zabbix-notebooklm

🛡️ Analyse des Vulnérabilités SQLi dans Zabbix avec NotebookLM Cahier Thématique développé pour la remise du Défi de Projet DIO Utilisant NotebookLM comme outil d'IA actif pour la curation, la synthèse et l'organisation des connaissances en Cybersécurité 📋 Table des matières Contexte et Objectifs...

CVE-2026-105247

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105253

The itsourcecode Online Admission System Project 1.0 is vulnerable to a SQL injection vulnerability in the /admin/login1.php file. The flaw is caused by improper processing of the User argument, which allows an unauthenticated remote attacker to execute arbitrary SQL commands. The exploit has bee...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

EUVD-2026-92288

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-34220

CVE-2026-43220 MikroORM SQL Injection ★ CVE-2026-43220 MikroORM SQL Injection PoC ★ https://github.com/user-attachments/assets/33724cfc-6151-47ff-9415-2f50c5124cd1 Обзор CVE-2026-43220 — это уязвимость SQL-инъекции в MikroORM , широко используемом ORM-фреймворке для TypeScript/Node.js. Когда...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Обзор CVE-2026-30951 — это уязвимость SQL-инъекции в Sequelize v6 , широко используемом ORM для Node.js. Уязвимость...

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa подвержен уязвимости SQL-инъекции SQLi. Этот недостаток позволяет злоумышленникам внедрять вредоносные SQL-команды, которые могут манипулировать базой данных, потенциально ставя под угрозу целостность и безопасность данн...

CVE-2026-0603

CVE-2026-0603 Инъекция в Hibernate ORM / SQL-инъекция второго порядка ★ CVE-2026-0603 PoC SQL-инъекции в Hibernate ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Обзор CVE-2026-0603 — это уязвимость SQL-инъекции второго порядка в Hibernate ORM , широко...

CVE-2024-45265

CVE-2024-45265 Предлагаемое описание Уязвимость SQL-инъекции в компоненте опросов в SkySystem Arfa-CMS до версии 5.1.3132 позволяет удалённым злоумышленникам выполнять произвольные SQL-команды через параметр psid. Тип уязвимости CWE-89 | SQL-инъекция Производитель продукта SkySystem...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – Неаутентифицированная SQL-инъекция в FreePBX, приводящая к RCE PoC Этот репозиторий содержит два Python-скрипта Proof-of-Concept PoC, нацеленных на CVE-2025-57819 — критическую неаутентифицированную уязвимость SQL-инъекции в FreePBX. 🧠 Об уязвимости CVE-2025-57819 CVE-2025-5781...

CVE-2026-105246

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

joomla.3.7.0exploit

CVE-2017-8917 Joomla SQLi PoC 이 저장소는 Joomla comfields SQL 인젝션 취약점CVE-2017-8917에 대한 간단하고 CTF 친화적인 개념 증명PoC을 포함합니다. 목표는 탐지, 열거 및 데이터 추출의 전체 익스플로잇 흐름을 보여주면서도 워크플로우를 가볍게 유지하는 것입니다. CVE-2017-8917 개요 취약점 : Joomla의 comfields 컴포넌트의 SQL 인젝션. 근본 원인 : listfullordering 매개변수가 적절히 검증되지 않아 SQL이 생성된 쿼리에 주입될 수...

CVE-2026-105247 SourceCodester Online Reviewer Management System btn_functions.php course sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105247

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a remote SQL injection vulnerability. The flaw exists in an unknown function within the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course . An attacker can trigger the vulnerability by manipulating...

EUVD-2026-92273

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

CVE-2026-105246

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to an SQL injection vulnerability within the /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update file. An attacker can initiate this attack remotely by manipulating the Subject argument. The vulnerability al...

CVE-2026-105246 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...