264237 matches found
CVE-2026-117514 oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
CVE-2026-117514 oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
EUVD-2026-111222
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
CVE-2026-117514
A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the Admin Record Pages component. Specifically, the processing of the file admin/customer_detail.php allows for the manipulation of arguments including costomer_id, ticket_id, emp_id, salary_id, and page_id to e...
CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
EUVD-2026-111105
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
CVE-2026-117513
The oretnom23 php-travel-agency-system is vulnerable to an SQL injection vulnerability within the Admin Search Pages component, specifically affecting the file admin/customer_search.php. An attacker can perform a remote attack by manipulating the customer_name, voucher_no, or emp_name arguments. ...
CVE-2026-106076
An SQL injection vulnerability exists in the Veeam Backup for Microsoft 365 server. An authenticated organization-transfer peer can inject SQL commands into the configuration database of the source server. This flaw allows for cross-tenant read and write of configuration data and potentially enab...
EUVD-2026-111123
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...
CVE-2026-106076
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...
CVE-2026-40083
SQL Injection in Cacti managers.php A proof-of-concept exploit for CVE-2026-40083, a SQL Injection vulnerability in Cacti's managers.php that allows any authenticated user with SNMP Manager permissions to read the entire MySQL database including user credentials and password hashes. Usage: Verify...
hackingtoolkit
All in One Hacking toolKit For Hackers, Penetration Tester and CyberSecurity 🥇 Install Kali Linux in WIndows10 Without VirtualBox YOUTUBE Update Available 3.0 ✔ Installation Bug Fixed Added New Tools 200 + Additional Tools Updating Everyday Added Tool in wifijamming Added Tool in steganography Pu...
Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE
Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE """Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE""" from future import annotations from kittysploit import import os, sys, socket, hashlib, base64, time import time import re import...
Countersoft Gemini Authenticated SQL Injection to xp_cmdshell RCE — Detect
Fingerprint / reachability check for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...
Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE — Detect
Fingerprint / reachability check for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE""" from kittysploit import from lib.protocols.http.httpclie...
Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect
Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...
Plixer Scrutinizer adminEditLang ORDER BY SQL Injection Authenticated RCE — Detect
Fingerprint / reachability check for Plixer Scrutinizer adminEditLang ORDER BY SQL Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Plixer Scrutinizer adminEditLang ORDER BY SQL Injection Authenticated RCE""" from kittysploit import from...
Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xp_cmdshell — Detect
Fingerprint / reachability check for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE""" from kittysploit...
Telaeris XPressEntry Unauthenticated SQL Injection RCE — Detect
Fingerprint / reachability check for Telaeris XPressEntry Unauthenticated SQL Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Telaeris XPressEntry Unauthenticated SQL Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...