5944 matches found
CVE-2026-103066
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2024-1301---Badgermeter-moni-tool-SQL-Injection
CVE-2024-1301 --- Badgermeter moni ツール - SQLインジェクション https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1301: 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CWE-89. ソフトウェアリンク : https://www.s-can.at/en/product/monitool/ バージョン : 4.6...
CVE-2026-103352
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-103066
The WP BASE Booking WordPress plugin (versions 6.4.0 and below ) is vulnerable to a Blind SQL Injection flaw. The root cause is the Improper Neutralization of Special Elements used in an SQL Command , which allows an attacker to execute malicious SQL queries. While the documents confirm the vulne...
EUVD-2026-92753
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-103066 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-103066 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2024-34472
CVE-2024-34472 描述： 已认证用户可利用 mliRealtimeEmails.php 文件中存在的盲 SQL 注入漏洞。向 /mailinspector/mliRealtimeEmails.php 发送 POST 请求时，ordemGrid 参数未正确过滤输入，导致已认证攻击者能够执行任意 SQL 命令，从而可能泄露整个应用程序数据库。 受影响版本： 在 HSC Mailinspector 5.2.17-3 中发现，但适用于直至 5.2.18 的所有版本。 概念验证 在浏览电子邮件收件箱时，检测到向 /mailinspector/mliRealtimeEmails.php...
CVE-2026-103352 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-103352
The WP BASE Booking WordPress plugin (versions 6.4.0 and below ) is vulnerable to a Blind SQL Injection flaw. The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to potentially execute malicious SQL queries. No specific e...
CVE-2026-103352 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
EUVD-2026-92591
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2023-42283
免责声明 仅供教育目的使用！ 详情 CVE-2023-42283 的概念验证。 Tyk Gateway 存在 SQL 注入漏洞。 已在 5.0.7 版本中修复。 “https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid=” 的 URL 参数 ‘apiid’ 存在盲 SQL 注入漏洞。 利用 使用 sqlmap 及以下参数： python.exe .\sqlmap.py -u...
College-Management-System-course_code-SQL-Injection-Authenticated
College Management System - 'coursecode' SQLインジェクション（認証済み） 1. 説明： College Management System 1.0では、/College-Management-System/admin/asign-single-student-subjects.php内のパラメータ'coursecode'を介してSQLインジェクションが可能です。この問題を悪用することで、攻撃者はアプリケーションを侵害し、データにアクセスまたは変更を行い、基礎となるデータベースの潜在的な脆弱性を悪用する可能性があります。 2. 概念実証：...
CVE-2022-0739
CVE-2022-0739 Python PoC エクスプロイト for CVE-2022-0739 機能 データベースメタデータの検索 Wordpress ユーザー資格情報のダンプ 任意のブラインドクエリインジェクション 💉 使用方法 usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help message and exit -u URL, --url URL URL of the page containing the BookingPress Widget -e EXEC, --exec EX...
CVE-2026-63030
CVE-2026-63030: wp2shell WordPress 批量 API 去同步 SQL 注入漏洞利用工具 通过 CVE-2026-63030 wp2shell 漏洞提取用户和密码哈希的概念验证工具。 漏洞信息 CVE : CVE-2026-63030 wp2shell 关联 CVE : CVE-2026-60137 类型 : 预认证盲注 SQL 注入 受影响版本 : WordPress 6.9.0–6.9.4, 7.0.0–7.0.1 修复版本 : 6.9.5, 7.0.2+ 使用方法 python POC.py options 基本用法 python POC.py...
CVE-2022-28171-POC
CVE-2022-28171-POC 我最初将此发布在 ExploitDB 上，你可以在 https://www.exploit-db.com/exploits/51607 找到它 Hikvision Hybrid SAN Ds-a71024 固件 - 多个远程代码执行漏洞 Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link: https://cve.report/CVE-2022-28171 Vulnerable Versions: Ds-a71024 Firmware...
CVE-2025-26794
CVE-2025-26794: Exim 4.98 SQLite DBM におけるブラインドSQLインジェクション - エクスプロイト解説 Exim レポート: https://www.exim.org/static/doc/security/CVE-2025-26794.txt この脆弱性は手動コードレビューにより発見しました。 脆弱性詳細: 問題 SQLite を DBM として使用する場合、SQL パラメータが適切にサニタイズされません。このため、リモートユーザーがカスタム SQLite クエリを作成できる可能性があります。 要件: Exim を "USESQLITE = yes"...
CVE-2026-104408
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...