EUVD-2026-95605

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5...

EUVD-2026-95609

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-95607 WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

CVE-2026-96327 WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

CVE-2026-96327

The VibeThemes WPLMS wplms_plugin for WordPress is vulnerable to Blind SQL Injection due to the improper neutralization of special elements used in SQL commands. This security flaw affects versions prior to 1.9.9.8.2 . Exploitation could lead to unauthorized access to the underlying database. No ...

CVE-2026-95607

The VibeThemes WPLMS WordPress theme (versions up to and including 4.973 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. The attack vector is network-based with low complexity , requiring low pr...

EUVD-2026-95599

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...

EUVD-2026-95598

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...

CVE-2026-95610

The UpSolution Core (us-core) WordPress plugin is vulnerable to a Blind SQL Injection flaw due to improper neutralization of special elements used in SQL commands. This issue affects versions through 9.3 . An attacker can exploit this vulnerability to perform unauthorized database queries. The do...

EUVD-2026-95596

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2026-95610 WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2024-55972

CVE-2024-55972 eTemplates = 5.0.12 AND time-based blind query SLEEP Payload: id=1 AND SELECT 4484 FROM...

bbqsql

BBQSQL 블라인드 SQL 인젝션 공격 도구 목차 BBQSQL이란? README 개요 상위 수준 사용법 설치 BBQSQL 옵션 쿼리 구문 개요 HTTP 매개변수 구성 내보내기 구성 가져오기 사용자 정의 훅 버그를 발견하셨나요? 도움을 줄 수 있나요? 이름은 왜 그런가요? BBQSQL이란? 블라인드 SQL 인젝션은 공격하기 까다롭습니다. 사용 가능한 도구가 작동할 때는 잘 작동하지만, 작동하지 않으면 직접 무언가를 작성해야 합니다. 이는 시간이 많이 걸리고 지루한 작업입니다. BBQSQL은 이러한 문제를 해결하는 데 도움을 줄...

blind-sql-bitshifting

비트 시프트를 통한 블라인드 SQL 인젝션 이 모듈은 비트 시프트 방법을 사용하여 문자를 추측하는 대신 계산 하여 블라인드 SQL 인젝션을 수행합니다. 구성에 따라 문자당 7/8개의 요청이 필요합니다. 사용법 import blind-sql-bitshifting as x Edit this dictionary to configure attack vectors x.options 예제 구성: Vulnerable link x.options"target" = "http://www.example.com/index.php?id=1"...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection

ClipBucket v5.5.2-187 and below contain a blind SQL injection caused by unsanitized objid parameter in /actions/ajax.php used in userexists function, letting attackers perform blind SQL injection remotely, exploit requires crafted POST request. id: CVE-2026-21875 info: name: ClipBucket v5 = 5.5.2...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

GLPI - Blind SQL Injection in History Log Filter (LogBleed)

GLPI versions before 10.0.26 and 11.0.8 are vulnerable to a blind SQL injection in the history log filter. The Log::convertFiltersValuesToSqlCriteria function splits the affectedfields filter into key:operator:value parts and DBmysqlIterator::analyseCrit does not quote OR, AND and NOT as column...

SqliSniper

기능 • 설치 • 사용법 • SqliSniper 실행 • 기여 • SqliSniper 는 HTTP 요청 헤더에서 시간 기반 블라인드 SQL 인젝션을 탐지하도록 설계된 강력한 Python 도구입니다. 다중 스레드를 활용하여 속도와 효율성을 보장하며 잠재적 취약점을 신속하게 스캔하고 식별함으로써 보안 평가 프로세스를 향상시킵니다. 다른 스캐너와 달리 SqliSniper는 오탐false positive을 제거하고 탐지 시 내장된 Discord 알림 기능을 통해 경고를 보내도록 설계되었습니다. 주요 기능 시간 기반 블라인드 SQL 인...