CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction

CVE-2024-1698 – Inyección SQL en el plugin NotificationX de WordPress Ciega basada en tiempo Inyección SQL ciega basada en tiempo sin autenticación → Extrae el nombre de usuario y el hash de la contraseña de administrador de WordPress. 🧠 Resumen de la vulnerabilidad Las versiones de NotificationX...

CVE-2026-73640

Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the parameters filled in with an arbitrary SQL query. The parameter is interpreted as part of SQL predicate resulting in Time-Based...

CVE-2026-73640

The Dayforce Payroll software is vulnerable to Time-Based Blind SQL Injection within its password recovery functionality . An unauthenticated attacker can exploit this by sending a GET request containing an arbitrary SQL query in one of the parameters. This parameter is incorrectly interpreted as...

EUVD-2026-88249

Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the parameters filled in with an arbitrary SQL query. The parameter is interpreted as part of SQL predicate resulting in Time-Based...

CVE-2026-73640 Time-based SQL Injection in Dayforce Payroll

Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the parameters filled in with an arbitrary SQL query. The parameter is interpreted as part of SQL predicate resulting in Time-Based...

CVE-2026-42647-Lab

CVE-2026-42647 - JoomSport Unauthenticated Time-Based Blind SQL Injection via sortf Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-42647, an unauthenticated SQL injection vulnerability affecting the WordPress plugin JoomSport - for Sports: Te...

CVE-2025-28346

Tipo de Vulnerabilidad Inyección SQL Descripción Se descubrió una vulnerabilidad de inyección SQL ciega basada en tiempo en Ticket-Booking-App - 1.0 que permite a un atacante ejecutar consultas SQL arbitrarias en la base de datos subyacente. El parámetro vulnerable no sanea adecuadamente la entra...

CVE-2024-57430

CVE-2024-57430 Una vulnerabilidad de inyección SQL en la función pjActionGetUser de PHPJabbers Cinema Booking System v2.0 permite a los atacantes manipular consultas de la base de datos a través del parámetro column. Explotar esta falla puede provocar divulgación no autorizada de información,...

phpMyFAQ <= 4.1.1 - SQL Injection

phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector and BuiltinCaptcha::saveCaptcha methods that interpolate unsanitized User-Agent headers into DELETE and INSERT queries. Unauthenticated attackers can exploit the public GET /api/captc...

Geo Mashup <= 1.13.18 - SQL Injection

Geo Mashup WordPress plugin = 1.13.18 is vulnerable to time-based SQL injection via the sort parameter. The issue exists because the sort value is insufficiently sanitized in render-map.php/template tag code paths. id: CVE-2026-4060 info: name: Geo Mashup = 1.13.18 - SQL Injection author:...

Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection

It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The updatelog function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected v...

CVE-2024-35584

CVE-2024-35584 Inyección SQL autenticada en OpenSIS Descripción Existe una vulnerabilidad de inyección SQL en Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php. Esta falla afecta a OpenSis Community Edition 9.1 a 8.0 y posiblemente a versiones anteriores. Prueba de...

poc-CVE-2019-9053

PoC CVE-2019-9053 - CMS Made Simple SQL Injection PoC didáctico en Python 3 para la CVE-2019-9053, una vulnerabilidad de SQL Injection time-based blind en CMS Made Simple = 2.2.9. Esta versión ha sido modificada para uso en CTF/laboratorio. Posee prefijos preconfigurados para reducir el tiempo de...

CVE-2025-68400

CVE-2025-68400: ChurchCRM 在 ConfirmReportEmail.php 中存在基于时间的盲SQL注入漏洞 概述 字段| 详情 ---|--- CVE ID| CVE-2025-68400 严重性| CRITICAL 安全公告| 查看公告 发现者| Lukasz Rybak 受影响的产品 ChurchCRM/CRM 详情 摘要 ChurchCRM 6.3.0 中的遗留端点 /Reports/ConfirmReportEmail.php 存在一个严重的SQL注入漏洞。虽然该功能已从 UI 中移除，但该文件仍然部署在服务器上，并可直接通过 URL 访问。这是一个典...

CVE-2025-45346

CVE-2025-45346 – Bacula-Web 基于时间的SQL注入（PostgreSQL版本提取） 📝 概述 漏洞名称 ：Bacula-Web 基于时间的盲SQL注入 产品 ：Bacula-Web 受影响版本 ：已确认支持 PostgreSQL 后端的版本 CVE ID ：CVE-2025-45346 严重程度 ：高 攻击向量 ：远程 影响 ：任意SQL执行、信息泄露 🧨 描述 此概念验证（PoC）展示了 Bacula-Web 中 jobfiles 端点的一个 基于时间的盲SQL注入 漏洞。 远程攻击者可利用此缺陷，通过 pgsleep 函数触发延迟，从而从底层...

CVE-2025-4396

CVE-2025-4396 - WordPress Relevanssi 基于时间延迟的盲SQL注入工具包 概述 本仓库包含一个针对 CVE-2025-4396 的实践研究与验证工具包，该漏洞是一个未认证的基于时间延迟的盲SQL注入 ，影响 WordPress Relevanssi 插件中的 cats 参数。 该项目专为授权的紫队演习 而构建，旨在： 在受控环境中验证漏洞的可利用性， 展示不同攻击者战术层级， 衡量SOC检测覆盖率， 以逼真的方式提取WordPress密码哈希， 并在哈希恢复后自动化离线破解流程。 本仓库包含： 一个标准提取脚本 ， 一个更快的二分搜索提取脚本 ，...

CVE-2025-5287

CVE-2025-5287 概念验证 针对 WordPress Likes and Dislikes 插件 ≤ 1.0.0 的未认证SQL注入漏洞利用 📖 描述 本Python脚本是 CVE-2025-5287 的概念验证（PoC）利用代码，针对 WordPress Likes and Dislikes 插件 ≤ 1.0.0 中的漏洞。 该漏洞允许未认证的攻击者通过 mylikesdislikesaction AJAX 动作中的 post 参数执行基于时间盲注的SQL注入，可能导致敏感数据泄露或进一步利用。 📌 使用方法 ▶️ 依赖要求： Python 3 requests 库 安装所需库...

WordPress-NotificationX-CVE-2024-1698

Configuración docker-compose up --build Limpieza docker-compose down Pruebas Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where id=1,1,1=36,SLEEP10,null-- -'...

CVE-2025-50383

CVE-2025-50383 Description A low-privileged authenticated user can exploit this vulnerability by sending a crafted HTTP POST request with a malicious orderby parameter e.g., orderby=IF1=1,SLEEP5,1. This can trigger time-based blind SQL injection, resulting in unauthorized SQL execution on the...

CVE-2024-51482

CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. ≤ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...