CVE-2018-12630

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

Joomla SquadManagement 1.0.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component SquadManagement 1.0.3 - SQL Injection Vendor Homepage: http://www.larshildebrandt.de/ Software Link: https://extensions.joomla.org/extensions/extension/sports-a-games/sports/squadmanagement/ Software Download:...

Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection

Exploit Title: Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://www.apptha.com/ Software Link: https://www.apptha.com/joomla/social-pinboard-script Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5987...

TSiteBuilder 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: TSiteBuilder 1.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/website/ Version: 1.0 Category: Webapps Tested on:...

CVE-2018-5696

The iJoomla comadagency plugin 6.0.9 for Joomla! allows SQL injection via the advertiserstatus and statusselect parameters to index.php...

FS Lynda Clone 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications 0day.today 2018-04-06...

FS Lynda Clone 1.0 - SQL Injection

FS Lynda Clone 1.0 - SQL Injection...

FS Linkedin Clone 1.0 - 'grid' / 'fid' / 'id' SQL Injection

Exploit Title: FS Linkedin Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/linkedin-clone/ Demo: http://linkedin-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on:...

tPanel 2009 - Authentication Bypass

Exploit Title: tPanel 2009 - Authentication Bypass Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/hosting/tpanel/ Demo: http://demo.datacomponents.net/tpanel/ Version: 2009 Category: Webapps Tested on:...

Sql injection

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

CVE-2017-15971

Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15972...

CVE-2017-15972

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15971...

ICAuction 2.2 - id SQL Injection

ICAuction 2.2 - id SQL Injection Exploit Title: eBay like Auction PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/ebay-like-auction-script.htm Demo: http://icloudcenter.net/demos/icauction/ Version:...

CVE-2014-9558

Multiple SQL injection vulnerabilities in SmartCMS v.2...

CVE-2017-13669

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...

iTech Social Networking Script 3.08 - SQL Injection

iTech Social Networking Script 3.08 - SQL Injection Exploit Title: iTech Social Networking Script 3.08 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/social-networking-script/ Demo: http://social.itechscripts.com Version...

Joomla! Component Appointment 1.1 - SQL Injection

Joomla! Component Appointment 1.1 - SQL Injection Exploit Title: Joomla! Component Appointment v1.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extensions/extension/appointment/ Demo:...

CVE-2017-11474

GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computersoftwareversion.class.php, exploitable via ajax/common.tabs.php...

Real Estate Classifieds Script - SQL Injection

Exploit Title: Real Estate Classifieds Script - SQL Injection Dork: N/A Date: 12.06.2017 Vendor : http://www.easyrealestatescript.com/ Software: http://www.easyrealestatescript.com/demo.html Demo: http://www.easyrealestatescript.com/demo.html Version: N/A Author: EziBilisim Author Web:...