CVE-2023-23279

Inyección SQL en Canteen Management System v1.0. Autor del bug: Tuannq Fecha de descubrimiento: 5/1/2023 Proveedor: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Cuenta de inicio de sesión: [email protected]/rootadmin Cuenta de Super Admin...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

mssqli-duet

MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...

CVE-2022-42098

KLiK-SocialMediaWebsite versión v1.0.1 Explicación de la vulnerabilidad: KLiK-SocialMediaWebsite v1.0.1 tiene vulnerabilidades de inyección SQL en profile.php en el parámetro id. Vectores de ataque: KLiK-SocialMediaWebsite v1.0.1 Una vez que se ha creado un usuario, también se pueden encontrar...

CVE-2024-1512

CVE-2024-1512 Prueba de Concepto Resumen de la Vulnerabilidad CVE-2024-1512 expone una vulnerabilidad crítica en el plugin MasterStudy LMS de WordPress, específicamente en la implementación de la ruta REST /lms/stm-lms/order/items. El problema surge por la falta de escape adecuado del parámetro...

CVE-2021-45041

CVE-2021-45041 CVE-2021-45041 の PoC、別名 SCRMBT-177 - SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45041 使用例: root@kitploit: .venv ➜ CVE-2021-45041 git:main ✗ ./exploit.py --host http://localhost --username user --password...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - Vulnerabilidad de inyección SQL en el sistema de reservas y reserva de eventos en línea versión 2.3.0. Descripción técnica: Existe una vulnerabilidad de inyección SQL en el software de gestión de eventos versión 2.3.0. Un atacante puede aprovechar el parámetro...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

CVE-2021-44593

CVE-2021-44593 Public disclosure of CVE-2021-44593. A SQL injection/arbitrary file upload/remote code execution vulnerability in Simple College Website. DESCRIPTION Simple College Website 1.0 is vulnerable to an unauthenticated union-based SQL injection in the "username" parameter of the...

CVE-2026-52763

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...

CVE-2026-52763

YesWiki , a PHP-based wiki system, is affected by a stored SQL injection in the recentchanges action (actions/recentchanges.php). The period argument supplied via the action syntax ({{recentchanges period="..."}}) bypasses a whitelist that only validates the $_GET form, flowing unvalidated into P...

CVE-2026-52763 YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...

CVE-2026-52763 YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...

EUVD-2026-69717

AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the UserLocation plugin's regions.json.php and cities.json.php endpoints. The country and region GET parameters are passed directly into SQL queries without escaping or prepared statement binding, allowing...

CVE-2026-84208

AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the UserLocation plugin's regions.json.php and cities.json.php endpoints. The country and region GET parameters are passed directly into SQL queries without escaping or prepared statement binding, allowing...

CVE-2026-84208 AVideo User_Location Plugin Unauthenticated SQL Injection

AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the UserLocation plugin's regions.json.php and cities.json.php endpoints. The country and region GET parameters are passed directly into SQL queries without escaping or prepared statement binding, allowing...

CVE-2026-84208 AVideo User_Location Plugin Unauthenticated SQL Injection

AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the UserLocation plugin's regions.json.php and cities.json.php endpoints. The country and region GET parameters are passed directly into SQL queries without escaping or prepared statement binding, allowing...

CVE-2026-84208

AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin , specifically in the regions.json.php and cities.json.php endpoints. The root cause is that the country and region GET parameters are passed directly into SQL queries without escaping ...

CVE-2026-76006 Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter

The Photo Gallery by Ays – Responsive Image Gallery plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 6.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer...

PT-2026-84533

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.1 Description An unauthenticated SQL injection exists in the User Location plugin. The endpoints 'regions.json.php' and 'cities.json.php' fail to properly escape or bind the country and region GET parameters before...