CVE-2024-8484

CVE-2024-8484 REST API TO MiniProgram = 4.7.1 - Unauthenticated SQL Injection CVE: CVE-2024-8484 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Score: 7.5 Slugs: rest-api-to-miniprogram Description: The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the...

CTF_Django_CVE-2022-34265

CTFCVE-2022-34265 Description An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a know...

CVE-2026-108965

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-108964

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

EUVD-2026-98286

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-108966

The SourceCodester Performance Indicator System 1.0 is vulnerable to an SQL injection flaw within the /opils/staff/product.php file. The vulnerability occurs during the processing of the Category argument, which allows an attacker to initiate a remote attack. While the documents state that an exp...

CVE-2025-24587

CVE-2025-24587 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Email Subscription Popup Vulnerable version = 1.2.23 Component slug email-subscribe Component link https://wordpress.org/plugins/email-subscribe/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection...

wp2shell

🔍 wp2shell - WordPress CVE-2026-63030 Vulnerability Scanner & Exploit ⚡ Fast, Real-time Vulnerability Scanner & Exploit for CVE-2026-63030 wp2shell 📌 Overview wp2shell is a comprehensive toolkit for detecting and exploiting CVE-2026-63030 , a critical vulnerability in WordPress that allows...

CVE-2025-25257-Exploit-Tool

CVE-2025-25257 Exploit Tool Credits Based on watchTowr Labs, 0xbigshaq, and pwner.gg analyses. Warnings For educational purposes only. Use on authorized systems. Modifies database/filesystem. Enhanced Python tool for detecting and exploiting CVE-2025-25257 Pre-Auth SQLi to RCE in Fortinet FortiWe...

CVE-2026-108965 SourceCodester Performance Indicator System edit_quantity.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-108965

The SourceCodester Performance Indicator System 1.0 is vulnerable to SQL injection due to a flaw in the code of the file /opils/staff/edit_quantity.php . An attacker can remotely trigger this vulnerability by manipulating the pqty argument. The exploit has been publicly disclosed and may be utili...

EUVD-2026-98280

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE_2022_3141

CVE-2022-3141: SQL Injection in ACS EDU 3rd Generation This repository contains a detailed security analysis and report for the vulnerability identified as CVE-2022-3141, affecting the ACS EDU 3rd Generation smart-card system. Vulnerability Overview CVE ID : CVE-2022-3141 Product : ACS EDU 3rd...

CVE-2026-108964 SourceCodester Performance Indicator System addproduct.php sql injection

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2026-108964

The SourceCodester Performance Indicator System 1.0 is vulnerable to a remote SQL injection flaw located in the /opils/admin/addproduct.php file. An attacker can exploit this by manipulating the prodcategory argument. While the specific component within the file is not detailed, the vulnerability...

EUVD-2026-98278

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2024-4295-Poc

CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple For educational purposes and authorized security testing only...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, but then drops $entry-metakey straight into the SQL string without escaping: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Because metakey comes from the database, the code treats it as trusted. But...

CVE-2021-24959

CVE-2021-24959 Description The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks. CVE CVE-2021-24959 CVSS 8.8 High Publicly Published Januar...