CVE-2022-50997

Weaver (Fanwei) E-cology 8.0 and 9.0 contain a SQL injection in HrmCareerApplyPerView.jsp that allows unauthenticated remote attackers to extract data from the backend database by manipulating the id GET parameter. An attacker can send a single crafted GET request using UNION-based payloads throu...

portswigger-labs

PortSwigger Web Security Academy — Lab Notes Notes from compl...

CVE-2018-25163

BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rollno and username parameters in forgot.php and login.php. Attackers can submit crafted POST requests with SQL UNION statements to...

Portswigger-Lab-SQLI-4

PortSwigger Web Security Academy Lab Report: SQL Injection Att...

vBulletin Forum 2.3.xx calendar.php SQL Injection

vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...