CVE-2021-45041

CVE-2021-45041 PoC для CVE-2021-45041, также известный как SCRMBT-177 — Аутентифицированная SQL-инъекция в SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45041 Пример использования: .venv ➜ CVE-2021-45041 git:main ✗ ./exploit.py --hos...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...

CVE-2022-42098

KLiK-SocialMediaWebsite version v1.0.1 Explication de la vulnérabilité : KLiK-SocialMediaWebsite v1.0.1 possède des vulnérabilités d'injection SQL sur profile.php au paramètre id. Vecteurs d'attaque : KLiK-SocialMediaWebsite v1.0.1 Une fois qu'un utilisateur a été créé, il peut également trouver...

CVE-2023-23279

Canteen Management System v1.0의 SQL 삽입 취약점. 버그 작성자: Tuannq 발견일: 2023년 5월 1일 벤더: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html 로그인 계정: [email protected]/rootadmin 슈퍼 관리자 계정 취약점 파일: /phpaction/getOrderReport.php 취약점 위치:...

mssqli-duet

MSSQLi-DUET - Инструмент перечисления пользователей домена на основе SQL-инъекций в MSSQL Скрипт для SQL-инъекций в MSSQL, который извлекает пользователей домена из среды Active Directory на основе брутфорса RID. Поддерживает различные методы обхода WAF через реализацию функций tamper из SQLmap...

CVE-2021-44593

CVE-2021-44593 Публичное раскрытие CVE-2021-44593. Уязвимость SQL-инъекции/произвольной загрузки файлов/удалённого выполнения кода в Simple College Website. ОПИСАНИЕ Simple College Website 1.0 уязвим к неаутентифицированной SQL-инъекции на основе UNION в параметре "username" страницы...

CVE-2024-1512

CVE-2024-1512 Доказательство концепции Обзор уязвимости CVE-2024-1512 раскрывает критическую уязвимость в плагине MasterStudy LMS WordPress, конкретно в реализации REST-маршрута /lms/stm-lms/order/items. Проблема возникает из-за неправильного экранирования параметра 'user' плагином в сочетании с...

wp2shell-poc

Как это вообще работает Чем этот PoC отличается от публичных эксплойтов wp2shell Все PoC используют одни и те же две уязвимости — путаницу в пакетном маршруте REST CVE-2026-63030 и SQL-инъекцию authornotin CVE-2026-60137 — с одинаковой двойной вложенной формой пакета. Разница между ними заключает...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - Vulnérabilité d'injection SQL dans le système de réservation et de réservation d'événements en ligne version 2.3.0. Description technique : Une vulnérabilité d'injection SQL existe dans le logiciel de gestion d'événements version 2.3.0. Un attaquant peut exploiter ...

local-gov-sqli-poc-and-remediation

Penetration Testing PoC and Portfolio — Luqman Hadi Autho...

intigriti-0926-writeup

Intigriti Challenge 0926 — Critter Gallery: UNION-based SQL In...

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

CVE-2021-48008 Chanjet CRM SQL Injection via get_usedspace.php

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the siteid GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based...

EUVD-2021-34882

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the siteid GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based...

EUVD-2019-20203

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

CVE-2019-25776

Weaver E-cology is affected by an unauthenticated SQL injection vulnerability in the userIdentifiers GET parameter of the mobile plugin endpoint (SyncUserInfo.jsp). Attackers bypass space-based WAF filters by wrapping SQL keywords in parentheses, enabling UNION-based injection to extract sensitiv...

Scary_POCs

CVE-2026-48842 - Roundcube Webmail SQL Injection PoC Fil...

CVE-2026-52763

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...

CVE-2026-52763: Improper Neutralization of Special Elements used in an SQL Command

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...

CVE-2026-52763 YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...