47 matches found
EUVD-2008-1174
Malware in sbrugna...
EUVD-2016-1747
Malware in sbrugna...
EUVD-2023-1081
Malicious code in bioql PyPI...
EUVD-2024-0088
Malicious code in bioql PyPI...
EUVD-2023-43715
Malicious code in bioql PyPI...
CVE-2025-50341
A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation...
WordPress WP HRM LITE plugin <= 1.1 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Hiro in WordPress Plugin WP HRM LITE versions = 1.1...
Exploit for CVE-2024-42327
CVE-2024-42327 - Zabbix SQL Injection Vulnerability SQLI No...
CVE-2024-48070
A security vulnerability exists in Weaver E-cology versions 9.x , where attackers can construct special requests to perform a SQL injection . This flaw allows for the insertion of remote malicious code, triggering malicious code execution and potentially leading to the control of server privilege...
CVE-2024-31856
An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This could result in an attacker injecting SQL syntax, writing arbitrary files to the system, and executing remote code...
CVE-2022-1361 Cambium Networks cnMaestro SQL Injection
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices...
SQL Injection in cacti/cacti
Description SQL Injection vulnerability occurs because the input taken from parameters is not sanitized for SQL Injection statement in useradmin.php useradmin.php:84 updatepolicies function contains sql injection vulnerability getnfilterrequestvar function takes get/post parameter without...
CVE-2009-4899
pixelpost 1.7.1 has SQL injection...
CVE-2019-13027
Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...
XooDigital - 'p' SQL Injection
Exploit Title: XooDigital - 'p' SQL Injection Date: 26.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html Demo Site: http://xooscripts.com/demos/xoodigital/ Version: Lastest Tested on: Kali Linux CVE: N/A ----- PoC :...
ICDoctor Appointment 1.3 - key SQL Injection
ICDoctor Appointment 1.3 - key SQL Injection Exploit Title: Doctor Appointment Script 1.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/doctor-appointment-script.htm Demo:...
iGreeting Cards 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: iGreeting Cards 1.0 - SQL Injection Dork: N/A Date: 04.09.2017 Vendor Homepage: http://coryapp.com/ Software Link: http://coryapp.com/?product&index Demo: http://coryapp.com/demo/greetingcards/ Version: 1.0 Category: Webapps...
Battle.net Clan Script for PHP 1.5.1 - Remote SQL Injection Vulnerability
No description provided by source. script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass = $POST'pass';...
phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ phpTrafficA load some file as /etc/passwd or /path/www/stats/Php/configsql.php ?lang= is also vulnerable to xss attacks, and as Hamid Ebadi has mention $lang is also vulnerab...
NetClassifieds [multiple vulnerabilities]
Application: NetClassifieds version: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...