Exploit for CVE-2026-56782

CVE-2026-56782 — Gorse Unauthenticated Database Dump / Restore...

CVE-2026-33058: Improper Neutralization of Special Elements used in an SQL Command

Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51...

CVE-2020-26630: Improper Neutralization of Special Elements used in an SQL Command

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin...

CVE-2022-41680: Improper Neutralization of Special Elements used in an SQL Command

Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'searchvalue parameter in the...

PT-2022-20140

Name of the Vulnerable Software and Affected Versions oretnom23 Automotive Shop Management System version 1.0 Description The issue allows remote attackers to exploit a blind SQL Injection Vulnerability through the product id parameter. This vulnerability enables attackers to dump all database...

CVE-2022-24956: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote...

PT-2022-11452

Name of the Vulnerable Software and Affected Versions BatFlat CMS version 1.3.6 Description Insecure permissions in the file database.sdb allow attackers to dump the entire database. Recommendations For BatFlat CMS version 1.3.6, consider changing the permissions of the database.sdb file to preve...

PT-2021-17705

Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A SQL injection vulnerability was discovered in the editid parameter. This issue allows admin users to dump all data from the database. Recommendations: For Local...

Henriquedornas 信息泄露漏洞

phpMyAdmin is a free, web-based MySQL database management tool from the Phpmyadmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. An information disclosure vulnerability exists in phpMyAdmin...

WordPress Plugin WatuPRO 5.5.1 - SQL Injection

WordPress Plugin WatuPRO 5.5.1 - SQL Injection Exploit Title: SQL Injection In WatuPRO WordPress Plugin to Create Exams, Tests and Quizzes Exploit Author: Manich Koomsusi Date: 03-07-2017 Software: WatuPRO Version: 5.5.1 Website: http://calendarscripts.info/watupro/ Tested on: WordPress 4.7.5...

CVE-2017-5569: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an...

PT-2017-16581

Name of the Vulnerable Software and Affected Versions eClinicalWorks Patient Portal version 7.0 build 13 Description A blind SQL injection issue was discovered, which can be exploited by authenticated users via an HTTP POST request to the "messageJson.jsp" endpoint. This can be used to dump...

Simple SQLi Dumper v5.1 - Tool to find bugs, errors or vulnerabilities in MySQL database

SSDp is an usefull penetration tool to find bugs, errors or vulnerabilities in MySQL database. Functions SQL Injection Operation System Function Dump Database Extract Database Schema Search Columns Name Read File read only Create File read only Brute Table & Column Download Simple SQLi Dumper v5....

vBulletin v3.5.2 XSS Vulnerabilities

Exploit for unknown platform in category web applications ==================================== vBulletin v3.5.2 XSS Vulnerabilities ==================================== Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 3.5.2...