CVE-2026-108965

The SourceCodester Performance Indicator System 1.0 is vulnerable to SQL injection due to a flaw in the code of the file /opils/staff/edit_quantity.php . An attacker can remotely trigger this vulnerability by manipulating the pqty argument. The exploit has been publicly disclosed and may be utili...

CVE_2022_3141

CVE-2022-3141: SQL Injection in ACS EDU 3rd Generation This repository contains a detailed security analysis and report for the vulnerability identified as CVE-2022-3141, affecting the ACS EDU 3rd Generation smart-card system. Vulnerability Overview CVE ID : CVE-2022-3141 Product : ACS EDU 3rd...

EUVD-2026-98278

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2026-108964 SourceCodester Performance Indicator System addproduct.php sql injection

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2026-108964

The SourceCodester Performance Indicator System 1.0 is vulnerable to a remote SQL injection flaw located in the /opils/admin/addproduct.php file. An attacker can exploit this by manipulating the prodcategory argument. While the specific component within the file is not detailed, the vulnerability...

CVE-2024-4295-Poc

CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple For educational purposes and authorized security testing only...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, but then drops $entry-metakey straight into the SQL string without escaping: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Because metakey comes from the database, the code treats it as trusted. But...

CVE-2026-108959

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2024-6028-Poc

CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker method getquestionscategories image image image Poc POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML,...

CVE-2020-25273

CVE-2020-25273 Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection. Vendor - SourceCodester Product -https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html V 1.0...

CVE-2024-13184

CVE-2024-13184 The Ultimate WordPress Toolkit – WP Extended = 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module Description The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions ...

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Safe, read-only SQLi detector for FreePBX’s /admin/ajax.php focused on template, model, and brand parameters. 🛡️ Uses error-based , boolean-based , and time-based techniques to flag potential injection without modifying the database. ✍️ Per-parameter verdicts + clean...

atutor-blind-sqli

ATutor v2.2.1 Blind SQL Injection Exploiting CVE-2016-2555 enumerating and dumping the underlying Database. Disclaimer All the information provided in this post is for educational purposes only. You shall not misuse the information to gain unauthorized access and/or write malicious programs. The...

EUVD-2026-98269

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-108959 itsourcecode Online Cake Ordering System addtransacdetail.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-108959

A SQL injection vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw impacts an unknown function within the /addtransacdetail.php file, where manipulating the ID argument allows for remote execution. The exploit has been disclosed publicly and may be used. No specif...

CVE-2017-8917

CVE-2017-8917 CVE-2017-8917 - Joomla 3.7.0 'comfields' SQL Injection. Dependencies : pip install art pip install beautifulsoup4 Exploit : python cve20178917.py...

sqlwinds

SQLWinds SQL Security Assessment & Post-Exploitation Toolkit SQLWinds is a command-line tool for security testing and exploiting Microsoft SQL Server. It provides an interactive environment to deeply analyze servers, escalate privileges, execute attacks, and pivot through networks all with...

wp2shell

wp2shell - WordPress RCE PoC CVE-2026-63030 + CVE-2026-60137 Unauthenticated Remote Code Execution in WordPress Core by: JohenLastGen 📌 Overview This tool chains two critical WordPress vulnerabilities to achieve unauthenticated RCE : Vulnerability| CVE| Description ---|---|--- REST Batch Route...