CVE-2024-1512

CVE-2024-1512 Konzeptnachweis Schwachstellenübersicht CVE-2024-1512 legt eine kritische Schwachstelle im MasterStudy LMS WordPress Plugin offen, speziell innerhalb der Implementierung der REST-Route /lms/stm-lms/order/items. Das Problem entsteht dadurch, dass das Plugin den Parameter 'user' nicht...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL-Injection-Schwachstelle im Online-Eventbuchungs- und Reservierungssystem Version 2.3.0. Technische Beschreibung: Eine SQL-Injection-Schwachstelle existiert in der Eventmanagement-Software Version 2.3.0. Ein Angreifer kann den anfälligen Parameter „id“ auf der...

CVE-2021-45041

CVE-2021-45041 PoC für CVE-2021-45041 auch bekannt als SCRMBT-177 - Authenticated SQL-Injection in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45041 Beispielverwendung: root@kitploit: .venv ➜ CVE-2021-45041 git:main ✗ ./exploit.py...

mssqli-duet

MSSQLi-DUET - Strumento per l'enumerazione degli utenti del dominio basata su injection MSSQL Script di SQL injection per MSSQL che estrae gli utenti del dominio da un ambiente Active Directory tramite brute forcing RID. Supporta varie forme di tecniche di bypass WAF attraverso l'implementazione ...

CVE-2023-23279

SQL Injection im Canteen Management System v1.0. Bug-Autor: Tuannq Entdeckt am: 5.1.2023 Anbieter: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login-Konto: [email protected]/rootadmin Super-Admin-Konto Schwachstellendatei:...

CVE-2022-42098

KLiK-SocialMediaWebsite Version v1.0.1 Schwachstellen-Erklärung: KLiK-SocialMediaWebsite v1.0.1 weist SQL-Injection-Schwachstellen in profile.php beim Parameter id auf. Angriffsvektoren: KLiK-SocialMediaWebsite v1.0.1: Sobald ein Benutzer erstellt wurde, können über die KLiK-Benutzerseite Persone...

wp2shell-poc

Wie funktioniert das überhaupt Wie sich dieser PoC von den öffentlichen wp2shell-Exploits unterscheidet Alle PoCs nutzen dieselben zwei Schwachstellen – die REST-Batch-Routen-Verwirrung CVE-2026-63030 und die authornotin SQL-Injection CVE-2026-60137 – mit derselben doppelt verschachtelten...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...

GHSA-W27M-RMMF-G5W4 Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...

EUVD-2022-56016

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

VulnCheck KEV: CVE-2022-50997

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2026-71237

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from 'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='' and password='' limit 1". An unauthenticated attacker can submit a payload...

CVE-2026-71237 Miantang IoT-PHP - Unauthenticated SQL Injection in /userlogin

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from 'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='' and password='' limit 1". An unauthenticated attacker can submit a payload...

EUVD-2026-44595

The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes...

CVE-2026-40523

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SAGLANALYTIC permission to execute arbitrary SQL queries by injecting malicious code into the PARAM2 and PARAM3 POST parameters. Attackers can exploit...

CVE-2026-40523 FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SAGLANALYTIC permission to execute arbitrary SQL queries by injecting malicious code into the PARAM2 and PARAM3 POST parameters. Attackers can exploit...

CVE-2026-40523

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SAGLANALYTIC permission to execute arbitrary SQL queries by injecting malicious code into the PARAM2 and PARAM3 POST parameters. Attackers can exploit...

PT-2026-53270

Name of the Vulnerable Software and Affected Versions FrontAccounting versions prior to 2.4.20 Description An issue exists in the Audit Trail report handler that allows authenticated attackers with SA GLANALYTIC permission to execute arbitrary SQL queries. This is achieved by injecting malicious...