cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Author: Byte Reaper Description This vulnerability is a Blind SQL Injection in the addcontent.php file of the Online Learning Management System CVE-2025-11077, allowing an attacker to extract database information by sending crafted POST requests. Requirements : Linu...

CVE-2025-22964

CVE-2025-22964: Time-based blind SQL injection in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 has a time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

CVE-2022-0439

CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Subscriber+ Blind SQL injection Must Have sqlmap installed & a valid username & password with subscriber+ Usage usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message and exit -w UR...

CVE-2025-11391

Unauthenticated Blind SQL Injection in PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res; An unauthenticated attacker can exploit this by crafting a malicious payload and injecting it into the ppomfieldsid parameter when adding ...

CVE-2026-36670

CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...

CVE-2020-15394-PoC

CVE-2020-15394 DBMS: MSSQL TRUE condition in sql query POST /AppManager/json/ApmAdminServices/checkResourceID HTTP/1.1 Host: redacted.com Content-Type: application/x-www-form-urlencoded Content-Length: 67 resourceIds=1+AND+SELECT+CASE+WHEN+1=1+THEN+1+ELSE+1/0+END=1-- HTTP/1.1 200 Set-Cookie:...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...

CVE-2026-49772

The Events Calendar SQL Injection CVE-2026-49772 PoC Description CVE-2026-49772 is an unauthenticated blind SQL injection in the WordPress plugin The Events Calendar. A broken REST parameter validator validatecallback returns a closure instead of validating lets the order parameter on the...

cve-2024-37765

Description MachForm up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page. SQL injection attacks consist in inserting SQL queries through the usage of an input data field from the client application. This kind of attack allows to obtain access to...

CVE-2024-55270

Student Management System 1.0 CVE-2024-55270 Overview The Student Management System SMS is a web application developed using PHP and MySQL for managing student information. This repository contains the source code and details of the system, along with a security vulnerability report. Auditor:...

CVE-2026-94388

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3...

EUVD-2026-102811

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3...

CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3...

CVE-2026-94388

The halfdata Green Popups WordPress plugin (versions before 7.6.3 ) is vulnerable to a Blind SQL Injection due to the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute arbitrary SQL queries, potentially compromising sensitive data...

EUVD-2026-102677

The Vitepos – Point of Sale POS for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'srcby.val.start / srcby.val.end operator 'bt'' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficien...

Frappe HRMS 16.x Authenticated Blind SQL Injection

Frappe HRMS versions 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contain an authenticated blind SQL injection vulnerability that permits extraction of sensitive database information. https://packetstorm.news/download/236048...

frevvomapexec

frevvomapexec frevvomapexec is a script to verify the existence of a blind SQL injection vulnerability by injecting a delay of your choosing in seconds in Square 9 GlobalForms 6.2. To verify the vulnerability is legitimate, the end user will be required to do math e.g. Subtracting the smaller...

CVE-2025-8471

CVE-2025-8471 SQL Injection PoC Author : Byte Reaper CVE : CVE-2025-8471 Vulnerability : SQL Injection in “projectworlds Online Admission System v1.0” Description : A blind SQL injection exists in adminlogin.php?aid=. This PoC sends a series of GET requests with various payloads—both two-stage...