ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Unauthenticated SQLi and Login Bypass CVE-2024-25227 Date: 23/02/2024 Tested on ABO.CMS 5.8 Vendor: ABO.CMS Vendor URL:https://abocms.ru ABO.CMS 5.8 is vulnerable to SQL Injection via the tblogin parameter, admin login page. The affected component is "tblogin"...

FreePBX-Multiple-CVEs-2025

FreePBX-Multiple-CVEs-2025 This repository documents three security vulnerabilities discovered in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, including analysis, impact, and proof-of-concept details for security research and awareness purposes. Description CVEs 🔴 CVE-2025-61675 A...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...

CVE-2025-54726

CVE-2025-54726 JS Archive List = 6.1.5 - Unauthenticated SQL Injection Description The JS Archive List plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

laravel-threat-detection

Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes — every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...

CVE-2015-1397

POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

CVE-2025-2011

CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability CVE Reference: CVE-2025-2011 This repository contains a proof-of-concept environment for testing the SQL injection vulnerability in Depicter Slider & Popup Builder plugin versions 3.6.2. Prerequisites Docker Docker Compose Python 3.x...

CVE-2022-23046

CVE-2022-23046 PHPIPAM 1.4.4 - SQLi Authenticated Orignal Exploit can be found here Original Exploit Author: Rodolfo "Inc0gbyt3" Tavares Tinker Script for CVE-2022-23046 I was having trouble getting the orginal script to run. Went ahead and tinkered with it for my use case. Used while completeing...

CVE-2022-42098

KLiK-SocialMediaWebsite version v1.0.1 Vulnerability Explanation: KLiK-SocialMediaWebsite v1.0.1 has SQL Injection Vulnerabilities on profile.php at parameter id. Attack Vectors: KLiK-SocialMediaWebsite v1.0.1 Once an user has been created it can also be find people on KLiK through the KLiK Users...

CVE-2024-27956

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. 📌 Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...

CVE-2023-23279

SQL injection in Canteen Management System v1.0. Bug author: Tuannq Discovered Day: 5/1/2023 Vendors: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login account: [email protected]/rootadmin Super Admin account Vulnerability File:...

CVE-2024-39304

Description This script is a PoC for CVE-2024-39304, where a SQLi is possible due to a lack of sanitization in the ChurchCRM project. Usage python3 CVE-2024-39304.py -u -p -b -v Example: python3 CVE-2024-39304.py -u FirstLast -p Password123 -b http://localhost/churchcrm -v Links...

CVE-2024-1071

CVE-2024-1071 CVE-2024-1071 Ultimate Member Unauthorized Database Access / SQLi PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2022-30512

CVE-2022-30512 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30512 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

Aj-Report-sql-CVE-2024-5356-POC

exp.py -u specifies URL or -f specifies file for batch detection, -t specifies threads, -h for help Usage pi install requirements.txt python exp.py -u 目标url -t 10 python exp.py -h Notes Ensure the URL starts with http:// or https://, otherwise an error will occur and cannot execute...

Published-CVE

Published-CVE This repository contains descriptions and exploits for two security vulnerabilities: 1. CVE-2023-33580: Stored Cross-Site Scripting XSS in the Student Study Center Management System V1.0, allowing attackers to execute arbitrary JavaScript code. 2. CVE-2023-33584: SQL Injection SQLI ...

CVE-2025-7605

CVE-2025-7605 code-projects AVL Rooms Project V1.0/profile.php SQL injection NAME OF AFFECTED PRODUCTS AVL Rooms Vendor Homepage https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ submitter dazhi Vulnerable File /profile.php VERSIONS V1.0 Software Link...

CVE-2022-30510

CVE-2022-30510 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30510 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

CVE-2026-9082

Drupal CVE-2026-9082 Scanner Semi-passive scanner that detects Drupal installations potentially vulnerable to CVE-2026-9082 PostgreSQL SQL injection. No SQL payloads sent. No state-changing requests. Vulnerable Versions Branch| Affected| Fixed ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x|...

CVE-2024-44542

CVE-2024-44542 Description: todesk v1.1 was discovered to contain a SQL injection vulnerability via the title parameter at /todesk.com/news.html. Vulnerability Type: SQL Injection Vendor of Product: todesk Affected Product Version: todesk - v1.1 Affected Component: todesk.com, news.html Attack...