sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2022-45808

CVE-2022-45808 LearnPress Plugin 4.2.0 - SQL injection cieca basata sul tempo non autenticata Descrizione Il plugin non sanitizza e non sfugge correttamente il parametro order by prima di utilizzarlo in una dichiarazione SQL, portando a una SQL injection sfruttabile da utenti non autenticati. POC...

WordPress WooCommerce Lottery plugin <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters vulnerability

Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters vulnerability discovered by h0xilo in WordPress Plugin WooCommerce Lottery versions = 2.2.9...

CVE-2019-9053-Exploit-Python-3

CVE-2019-9053 Exploit Python 3 Dieses Repository enthält einen Exploit für die Schwachstelle CVE-2019-9053, die in der CMS Made Simple CMSMS-Software gefunden wurde. Der Exploit wurde modifiziert, um mit Python 3 zu funktionieren und ist mit CMSMS Version 2.2.9 und darunter kompatibel. Beschreibu...

CVE-2026-42647-Lab

CVE-2026-42647 - JoomSport Unautehentifizierte zeitbasierte Blind SQL Injection über sortf Executive Summary Dieses Repository enthält ein lokales Docker-Labor zur Reproduktion und Validierung von CVE-2026-42647, einer unauthentifizierten SQL-Injection-Schwachstelle, die das WordPress-Plugin...

CVE-2025-22964

CVE-2025-22964: SQL injection cieca basata sul tempo in DDSN Interactive cm3 Acora CMS versione 10.1.1 DDSN Interactive cm3 Acora CMS versione 10.1.1 presenta una vulnerabilità di SQL injection cieca basata sul tempo causata da una sanitizzazione e una validazione insufficienti dell'input nel...

CVE-2026-18884

The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Thi...

CVE-2026-18884 WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters

The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Thi...

EUVD-2026-66333

The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Thi...

CVE-2026-18884

The WooCommerce Lottery plugin for WordPress (all versions up to and including 2.2.9 ) is vulnerable to unauthenticated time-based SQL injection via the orderby and order GET parameters. The root cause is insufficient escaping on user-supplied input combined with inadequate preparation of the exi...

CVE-2019-10708

Scms - SQL Injection exploit.py è un PoC per la vulnerabilità CVE-2019-10708, implementa l'iniezione tramite multiprocessing per ottenere i nomi dei database e le credenziali dell'amministratore del backend si consiglia una versione precedente al 20190401. Utilizzo root@kitploit: 測試是否可注入 python3...

CVE-2024-27956

CVE-2024-27956 Nota Costruisci wordpress: docker-compose -f stack.yml up Installa il plugin: 1. Nella dashboard di WordPress, scegli Plugin Aggiungi nuovo 2. Fai clic su Carica plugin 3. Scegli File - wp-automatic.zip - Installa ora 4. Dopo che l'installazione è completa, fai clic su Attiva plugi...

poc-CVE-2019-9053

PoC CVE-2019-9053 - CMS Made Simple SQL Injection PoC didattico in Python 3 per la CVE-2019-9053, una vulnerabilità di SQL Injection time-based blind in CMS Made Simple = 2.2.9. Questa versione è stata modificata per l'uso in CTF/laboratorio. Possiede prefissi preconfigurati per ridurre il tempo ...

CVE-2022-31061

CVE-2022-31061 PoC para GLPI CVE-2022-31061 Uma Prova de Conceito para GLPI = 9.3.0 e 10.0.2 - Injeção SQL não autenticada na página de login Aviso legal : O uso deste script para atacar um alvo sem consentimento mútuo é ilegal. É responsabilidade do usuário final obedecer a todas as leis...

CVE-2024-35584

CVE-2024-35584 OpenSIS Iniezione SQL autenticata Descrizione Esiste una vulnerabilità di iniezione SQL in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php. Questa scoperta riguarda OpenSis Community Edition dalla 9.1 alla 8.0 e possibilmente versioni precedenti...

CVE-2026-24417

CVE-2026-24417: OpenSTAManager tem uma Injeção de SQL Cega Baseada em Tempo com Negação de Serviço Amplificada Visão Geral...

CVE-2025-41373

CVE-2025-41373 – SQL Injection in Gandia Integra Total Autore: Byte Reaper CVE: CVE-2025-41373 Vulnerabilità: SQL Injection autenticata Percorso interessato: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= Descrizione: Questo endpoint concatena il parametro idestudio...

CVE-2024-57430

CVE-2024-57430 Eine SQL-Injection-Schwachstelle in der Funktion pjActionGetUser des PHPJabbers Cinema Booking System v2.0 ermöglicht es Angreifern, Datenbankabfragen über den Parameter column zu manipulieren. Die Ausnutzung dieses Fehlers kann zu unbefugter Offenlegung von Informationen,...

CVE-2019-9053

CVE-2019-9053 Exploit – CMS Made Simple SQL-Injection ohne Authentifizierung SQLi Ein Exploit-Skript für CVE-2019-9053 , eine kritische SQL-Injection ohne Authentifizierung SQLi -Schwachstelle in CMS Made Simple Versionen 2.2.9 und darunter. Dieses Tool verwendet zeitbasierte SQL-Injection , um...

CVE-2023-38890

CVE-2023-38890 Beschreibung Das Online Shopping Portal Project V3.1 ermöglicht es entfernten Angreifern, beliebige SQL-Befehle/-Abfragen über das Anmeldeformular auszuführen, was zu unbefugtem Zugriff und potenzieller Datenmanipulation führt. Diese Schwachstelle entsteht durch unzureichende...