5086 matches found
CVE-2026-62060
The WordPress Captivate Sync plugin (versions
CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...
EUVD-2026-90808
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...
CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...
CVE-2026-102379 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC...
CVE-2026-102379
The BuildKit – Product Builder for WooCommerce – Custom PC Builder WordPress plugin (versions ≤ 1.0.28 ) is vulnerable to a Blind SQL Injection due to the improper neutralization of special elements used in an SQL command. This vulnerability, identified in the woo-product-builder component, allow...
CVE-2026-102379 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC...
EUVD-2026-90803
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC...
EUVD-2026-90793
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...
CVE-2026-103338
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin, affecting versions up to and including 2.0.20 , is vulnerable to Blind SQL Injection . The root cause is the Improper Neutralization of Special Elements used in an SQL command. This vulnerability allows an at...
CVE-2026-103338 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...
CVE-2026-103338 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...
CVE-2021-39378
openSIS 8.0 SQL 注入漏洞 CVE-2021-39378 当使用 MySQL（MariaDB）作为应用程序数据库时，openSIS 8.0 版本存在 SQL 注入漏洞。恶意攻击者可以通过易受攻击的 str= 参数向 MySQL（MariaDB）数据库执行 SQL 命令。 易受攻击的 PHP 页面： NamesList.php 漏洞 Payload sqlmap -u "http://localhost:8081/NamesList.php?str=J&blockid=1" --cookie="PHPSESSID=s8n71sv8ji77mdjkmh6cj1ik5d;...
EUVD-2026-90600
Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...
CVE-2025-66947
CVE-2025-66947 krishanmuraiji SMS v1.0 中的基于时间的盲SQL注入 ⏱️ 视觉效果对比：正常响应 vs 约6秒延迟响应 🔍 摘要 TL;DR: 管理员模块中的GET参数通过响应延迟实现了基于时间的SQL注入。 在 krishanmuraiji SMS v1.0 中存在一个基于时间的盲SQL注入漏洞 ，原因是管理模块中一个GET参数未经过恰当的验证。 🎯 受影响组件 文件: /studentms/admin/edit-class-detail.php 参数: editid GET 问题: 未经过滤的输入直接用于SQL查询 🧪 概念验证 PoC 第一步 —...
CVE-2025-67261
CVE-2025-67261 - Abacre Retail Point of Sale 14.0.0.396 中的基于内容的盲SQL注入 Abacre Retail Point of Sale 14.0.0.396 容易受到基于内容的盲SQL注入攻击。该漏洞位于“Orders”页面的“Search”功能中。 “Orders”页面下的“Search”功能容易受到基于内容的盲SQL注入攻击。 一个简单的载荷即可让我们获得初步确认，随后，使用下面的查询，我们可以确认Firebird数据库文件中存在“Client”表。 ' OR EXISTSSELECT 1 FROM Client--...
CVE-2026-62097
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
EUVD-2026-89957
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
CVE-2026-62097 WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
CVE-2026-62097
The WPTasty Business Directory plugin for WordPress (versions n/a through 6.4.27 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command . This flaw allows an attacker with high privileges to execute malicious SQL queries. No specific e...