CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. Overview This is a bulk scanning and exploitation tool for CVE-2024-7928: FastAdmin up to 1.3.3.20220121 allows unauthenticated attackers to execute a directory traversal. This tool is based on this...

Joomla Easy Store - SQL Injection

Joomla Easy Store extension 1.0.0-2.0.1 contains an unauthenticated SQL injection caused by improper validation of order parameters, letting unauthenticated attackers read the full database including credentials and sessions. id: CVE-2026-65761 info: name: Joomla Easy Store - SQL Injection author...

CVE-2024-34472

CVE-2024-34472 Descripción: Un usuario autenticado puede abusar de una vulnerabilidad de inyección SQL ciega que existe en el archivo mliRealtimeEmails.php. El parámetro ordemGrid en una solicitud POST a /mailinspector/mliRealtimeEmails.php no sanitiza adecuadamente la entrada, lo que permite a u...

CVE-2024-7928

CVE-2024-7928 CVE-2024-7928 的概念验证（POC）。将尝试获取 FastAdmin 实例的数据库详情。 如何使用 FOFA 搜索语句：app="FASTADMIN" 安装脚本依赖： root@kitploit: pip install -r requirements.txt 单个目标： root@kitploit: python CVE-2024-7928.py -u https://target:9090 批量扫描： root@kitploit: python CVE-2024-7928.py -f file.txt 免责声明 警告！！！...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core 盲SQL注入漏洞 CVE-2025-69295 是一个影响 TeconceTheme Coven Core WordPress 主题中 Coven Core 组件的 SQL 注入漏洞。该漏洞源于在将用户提供的输入用于 SQL 查询之前未能正确进行中和处理，从而允许攻击者将恶意的 SQL 命令注入后端数据库查询。 该漏洞特指盲SQL注入，攻击者可以通过发送精心构造的请求并分析响应时间或行为差异等间接响应，从数据库中提取敏感信息。 技术细节 该漏洞的发生是因为输入参数在传入 SQL...

CVE-2024-7928

CVE-2024-7928: Vulnerabilidad de lectura arbitraria de archivos en FastAdmin V1.3.4.20220530 CVEHunter es una herramienta de detección y explotación de vulnerabilidades para recuperar los detalles de la base de datos de instancias de FastAdmin para CVE-2024-7928, con mayor precisión y concurrenci...

CVE-2026-59971

MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCPTRANSPORT=sse causes src/mysqlmcpserver/server.py to construct SseServerTransport without securitysettings or enablednsrebindingprotection, while the Starlette rout...

PT-2026-70154

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = label creator permission to execute arbitrary SQL via the image name field of a patron card layout. The image name value is stored verbatim in the layout XML...

CVE-2026-12987

The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-User-Account Booking Mode: a booker-supplied registration field is stored as booking meta and later deserialized without restricting allowed classes, enabling PHP object injection...

EUVD-2026-41057

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php line 17: SELECT id, filename, extension, type, duration, owner, private FROM files where id = '".$GET'id'."'. An authenticated attacker can perform error-based SQL injection to extract...

CVE-2017-20244 Wow Forms WordPress Plugin 2.1 SQL Injection

Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unescaped POST parameter. Attackers can inject SQL code through the 'mwpformid' parameter in requests to the admin-ajax.php...

CVE-2018-25411

CVE-2018-25411 affects MGB OpenSource Guestbook 0.7.0.2. The vulnerability is an SQL injection in the email.php endpoint vulnerable to crafted payloads via the id parameter, allowing unauthenticated attackers to execute arbitrary SQL and potentially enumerate database tables and columns. The issu...

CVE-2018-25411 MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php

MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to email.php with crafted SQL payloads in the 'id' parameter to...

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

CVE-2026-42871

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiardocfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the...

EUVD-2026-29186

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiardocfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the...

CVE-2026-32321

ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 80 within the actions/ajax.php endpoint. Due to insufficient input sanitization of the userid parameter, an authenticated attacker can execute...

EUVD-2026-12960

ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 80 within the actions/ajax.php endpoint. Due to insufficient input sanitization of the userid parameter, an authenticated attacker can execute...

PT-2026-26155

ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 80 within the actions/ajax.php endpoint. Due to insufficient input sanitization of the userid parameter, an authenticated attacker can execute...

📄 WordPress Backup Migration 1.3.7 Database Disclosure

WordPress Backup Migration plugin version 1.3.7 allows unauthenticated users to access sensitive backup files, potentially exposing the full database and website content. An attacker can retrieve backup archives without authentication...