CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - Múltiples vulnerabilidades de inyección SQL - savedepartment Descripción : Múltiples vulnerabilidades de inyección SQL en /customersupport/ajax.php?action=savedepartment en Customer Support System 1.0 permiten a atacantes autenticados ejecutar comandos...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - Una vulnerabilidad de inyección SQL en Computer Laboratory Management System v1.0 permite a los atacantes ejecutar comandos SQL arbitrarios...

CVE-2021-24741

CVE-2021-24741 Múltiples Inyecciones SQL Sin autenticación en Support Board v 3.3.3 Descripción root@kitploit: Support Board V 3.3.3 Múltiples vulnerabilidades de Inyección SQL en Support Board Versión 3.3.3 que permiten a un atacante remoto no autenticado ejecutar comandos SQL arbitrarios a trav...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Múltiples vulnerabilidades de inyección SQL - saveticket Descripción : Múltiples vulnerabilidades de inyección SQL en /customersupport/ajax.php?action=saveticket en Customer Support System 1.0 permiten a atacantes autenticados ejecutar comandos SQL...

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...

Piwigo 13.7.0 - SQL Injection

Piwigo is open source photo gallery software. Prior to version 13.8.0, there is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header User-Agent is vulnerable at the endpoint that records user information when logging in to the...

CVE-2022-34265

CVE-2022-34265 Uso iniciar root@kitploit: docker-compose build docker-compose up -d detener root@kitploit: docker-compose down Verificación PoC de la vulnerabilidad de Django CVE-2022-34265 Una vulnerabilidad CVE-2022-34265 en Django fue divulgada el 5 de julio de 2022 hora de EE. UU.. Este...

EUVD-2026-76115

NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition...

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10547 info: nam...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

PT-2026-89878

NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition...

CVE-2026-72550-poc

CVE-2026-72550 — Friendica Unauthenticated SQL Injection Unauthenticated stacked-query SQL injection in the photos endpoint in Friendica allows any visitor to run arbitrary SQL...

CVE-2024-34222

Sistema de Gestión de Recursos Humanos 1.0 Presentado por: Kha Do Vulnerabilidad Inyección SQL Descripción La vulnerabilidad de inyección SQL en /hrm/country.php en SourceCodester Human Resource Management System 1.0 permite a los atacantes ejecutar comandos SQL arbitrarios a través del parámetro...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

django-cve-2025-64459

Django CVE-2025-64459 Esta aplicación demuestra CVE-2025-64459 que afecta a múltiples versiones de Django. Esta vulnerabilidad ha sido corregida en versiones más recientes de Django. SQL Injection SQL Injection es cuando la entrada proporcionada por el usuario se trata como parte de una consulta...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – Inyección SQL en LangGraph SQLite Checkpoint CVE-2025-67644 es una vulnerabilidad de inyección SQL CWE-89 en el paquete langgraph-checkpoint-sqlite parte del ecosistema LangGraph / LangChain. Permite a un atacante inyectar SQL arbitrario a través de claves de filtro de...