CVE-2024-46532

Numero CVE: CVE-2024-46532 fornitore: 上海顶想信息科技有限公司https://www.kancloud.cn/ prodotto: 互联网医疗系统医疗门诊OpenHIS versione: V1.0 componente interessata: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Riproduzione delle vulnerabilità di SQL Injection in OpenHIS Vulnerabilità：...

CVE-2020-28413_Mantis2.24.3-SQLi-SOAP

Dieses Repository hat keine README-Datei...

CVE-2024-12270

CVE-2024-12270 Beautiful Taxonomy Filters = 2.4.3 - SQL Injection non autenticata Descrizione Il plugin Beautiful Taxonomy Filters per WordPress è vulnerabile a SQL Injection tramite il parametro 'selects0term' in tutte le versioni fino alla 2.4.3 inclusa, a causa di un insufficiente escaping del...

CVE-2026-76602

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

CVE-2026-76571

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — SQLi su FreePBX → RCE → Root PoC a catena completa per CVE-2025-57819. Iniezione SQL basata su errori non autenticata nel modulo endpoint di FreePBX che si trasforma in una shell root tramite iniezione di cron job ed escalation di privilegi incron. Solo per test autorizzati e...

CVE-2024-13481

CVE-2024-13481 LTL Freight Quotes – R+L Carriers Edition = 3.3.4 - SQL Injection non autenticata Descrizione Il plugin LTL Freight Quotes – R+L Carriers Edition per WordPress è vulnerabile a SQL Injection tramite i parametri 'editid' e 'dropshipeditid' in tutte le versioni fino alla 3.3.4 inclusa...

CVE-2026-76602 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

CVE-2026-76602 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

EUVD-2026-64329

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

CVE-2026-76602

Fabrik is a Joomla extension (fabrikar.com) that provides form and database management. In versions below 4.7.3 , the order parameter in list models is passed directly into database queries without validation, enabling unauthenticated SQL injection via the ORDER BY clause. This allows an attacker...

CVE-2026-76571

Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.3 are vulnerable to an unauthenticated SQL injection in the list filter condition parameter. The root cause is that the condition parameter is concatenated verbatim into the WHERE clause constructed by getFilterQuery(), allowing an...

CVE-2026-76571 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...

EUVD-2026-64327

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...

CVE-2026-76571 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...

CVE-2022-0739

CVE-2022-0739 BookingPress 1.0.11 - Nicht authentifizierte SQL-Injection Das Plugin versäumt es, die vom Benutzer bereitgestellten POST-Daten ordnungsgemäß zu bereinigen, bevor sie in einer dynamisch erstellten SQL-Abfrage verwendet werden, und zwar über die AJAX-Aktion...

CVE-2021-32789

CVE-2021-32789 Authentifizierte Blind-SQL-Injection. WordPress-WooCommerce-Plugin-Versionen = 2.5.0 Installation root@kitploit: git clone https://github.com/DonVorrin/CVE-2021-32789.git cd CVE-2021-32789 sudo pip install -r requirements.txt Exploit root@kitploit: python3 exploit.py Enter URL:...

joomla.3.7.0exploit

CVE-2017-8917 Joomla SQLi PoC Questa repository contiene un proof of concept PoC semplice e adatto a CTF per la vulnerabilità di SQL injection comfields di Joomla CVE-2017-8917. L'obiettivo è mantenere il flusso di lavoro leggero mostrando comunque l'intero flusso di sfruttamento: rilevamento,...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 è una vulnerabilità di SQL Injection identificata nel sistema MODAPS di NASA EOSDIS, causata da una convalida impropria dell'input nel parametro category. Questa vulnerabilità consente agli attaccanti di accedere a dati sensibili ed eseguire query SQL arbitrarie attraverso la...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – Iniezione SQL non autenticata in FreePBX verso RCE PoC Questo repository contiene due script Proof-of-Concept PoC in Python che mirano a CVE-2025-57819 , una vulnerabilità critica di iniezione SQL non autenticata in FreePBX. 🧠 Informazioni sulla vulnerabilità CVE-2025-57819...