283374 matches found
Final-project-SQL-injection-pipeline
SQL Injection Detection ā Hybrid ML Pipelines Source code for the MSc dissertation: Enhancing Web Application Firewall with Machine Learning for SQL Injection Detection | ---|--- Author| Lilliane Linnet Musoke Institution| University of Reading, Department of Computer Science Programme| MSc Data...
CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...
CVE-2026-109523
A SQL injection vulnerability exists in the AJAX Endpoint component of the girishsaraf Online-Appointment-Booking-System (affected up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in the functionality of the Admin/getclinic.php file, where manipulating the city/cid argu...
CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...
CVE-2026-109522
The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the Admin CRUD Endpoint component. Specifically, an unknown function in the Admin/deleteclinic.php file is susceptible to exploitation via the manipulation of the cid/did arguments. This flaw allows fo...
CVE-2026-109522 girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...
CVE-2026-109521
The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to SQL injection due to insufficient sanitization of the dateselected argument within an unknown function in the changebookingstatus.php file. This vulnerability can be exploit...
CVE-2026-109521 girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...
wp2shell-vulnerability-scanner
WP2Shell Scanner A read-only, non-destructive security audit tool that scans WordPress installations for the wp2shell vulnerability chain. Overview WP2Shell Scanner is a bash utility that recursively searches a directory tree for WordPress installations and checks whether each site is running a...
CVE-2026-39492
CVE-2026-39492 ā WP Maps Blind SQL Injection Scanner Pre-Auth Time-Based Blind SQLi via Backtick Bypass ā DB Extraction Overview CVE-2026-39492 is a critical-severity CVSS 9.3 unauthenticated blind SQL injection vulnerability in the WP Maps plugin wp-google-map-plugin versions ā¤ 4.9.1. The...
CVE-2024-51482-POC
ZoneMinder Authenticated Time Based SQLi POC - CVE-2024-51482 ā ļø For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents ZoneMinder Authenticated Time Based SQLi POC - CVE-2024-51482...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...