Lucene search
+L

13337 matches found

Kitploit
Kitploit
added 2026/09/12 1:47 p.m.6 views

CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - savedepartment Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL comman...

8.8CVSS7.9AI score0.13754EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.18 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

9CVSS6.3AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.19 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.17 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.20 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
Kitploit
Kitploit
added 2026/09/12 4:47 a.m.6 views

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description root@kitploit: Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode,...

9.8CVSS8.7AI score0.05603EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 3:57 a.m.6 views

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...

8.8CVSS7.9AI score0.00786EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.67 views

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...

9.8CVSS8AI score0.32124EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.136 views

Piwigo 13.7.0 - SQL Injection

Piwigo is open source photo gallery software. Prior to version 13.8.0, there is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header User-Agent is vulnerable at the endpoint that records user information when logging in to the...

9.8CVSS8.2AI score0.97405EPSS
SaveExploits20References5
Kitploit
Kitploit
added 2026/09/11 10:03 p.m.6 views

CVE-2022-34265

CVE-2022-34265 Usage start root@kitploit: docker-compose build docker-compose up -d stop root@kitploit: docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion...

9.8CVSS6.8AI score0.73274EPSS
SaveExploits3
EUVD
EUVD
added 2026/09/11 2:17 p.m.8 views

EUVD-2026-76115

NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition...

8.3CVSS0.0045EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 9:30 a.m.6 views

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - 计算机实验室管理系统 v1.0 中的一个 SQL 注入漏洞允许攻击者执行任意 SQL 命令。...

4.3CVSS5.9AI score0.00769EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.97 views

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10547 info: nam...

9.8CVSS7.9AI score0.36563EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.123 views

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

9.8CVSS6.6AI score0.40609EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-89878

NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition...

8.3CVSS0.0045EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 5:22 p.m.7 views

CVE-2026-72550-poc

CVE-2026-72550 — Inyección SQL no autenticada en Friendica La inyección SQL de consultas apiladas no autenticada en el endpoint de fotos de Friendica permite que cualquier visitante ejecute SQL arbitrario...

9.8CVSS5.9AI score0.00503EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 4:44 p.m.6 views

CVE-2024-34222

Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...

5.9CVSS5.9AI score0.00392EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.90 views

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

9.8CVSS8.5AI score0.83406EPSS
SaveExploits24References5
Kitploit
Kitploit
added 2026/09/10 3:38 a.m.5 views

django-cve-2025-64459

Django CVE-2025-64459 This application demonstrates CVE-2025-64459 affecting multiple Django versions. This vulnerability has been patched in newer releases of Django. SQL Injection SQL Injection is when user-provided input is treated as part of a SQL query, allowing an attacker to change how the...

9.1CVSS7.1AI score0.19396EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 9:24 p.m.5 views

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

7.8CVSS6.3AI score0.02306EPSS
SaveExploits2
Rows per page
Query Builder