CVE-2026-42647-Lab

CVE-2026-42647 - Inyección SQL ciega basada en tiempo no autenticada en JoomSport a través de sortf Resumen ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar CVE-2026-42647, una vulnerabilidad de inyección SQL no autenticada que afecta al plugin de WordPres...

CVE-2026-63039

CVE-2026-63039 — Apache InLong AuditAlertRule inyección SQL en ORDER BY Reproductor de prueba de concepto ejecutable para la inyección SQL en la consulta de reglas de alerta de auditoría de Apache InLong. El mapper del manager de InLong AuditAlertRuleEntityMapper.selectByCondition filtra con...

CVE-2026-101110

CVE-2026-101110 — OrdaSoft Book Library Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101110 — OrdaSoft Book Library Free for Joomla ≤ 6.4.6. Upgrade to 6.4.7+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101110 Catalog| https://pocbit.org/pocs/ Component| combooklibrary Fil...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Primero que todo, debes instalar sqlmap. Necesitas configurar: dominio o IP objetivo tu cookie Luego ejecuta el shell: sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2026-49772

Prueba de Concepto PoC de Inyección SQL en The Events Calendar CVE-2026-49772 Descripción CVE-2026-49772 es una inyección SQL ciega no autenticada en el plugin de WordPress The Events Calendar. Un validador de parámetros REST defectuoso validatecallback devuelve un closure en lugar de validar...

PT-2026-104126

Name of the Vulnerable Software and Affected Versions Dc Woocommerce Multi Vendor versions prior to 5.0.19 Description An issue exists where authenticated attackers with vendor-level access or higher specifically those with the edit stores capability can perform SQL Injection. This occurs because...

CVE-2026-25513

CVE-2026-25513: FacturaScripts tiene una inyección SQL en la cláusula ORDER BY de la API Descripción general Campo| Detalles ---|--- ID de CVE| CVE-2026-25513 Gravedad| ALTA Aviso| Ver aviso Descubierto por| Lukasz Rybak Productos afectados facturascripts/facturascripts versiones: 2025.81...

CVE-2026-78070

Inyección SQL mediante Shortcode ORDER BY en plgcontentdpcalendar DPCalendar Free ≤ 10.11.2 — Un usuario con rol Autor extrae la base de datos completa mediante inyección ciega basada en tiempo RESUMEN El plugin de contenido plgcontentdpcalendar analiza los shortcodes events order="..."/events...

CVE-2026-1581-Analysis-Lab

CVE-2026-1581 — wpForo Forum = 2.4.14 Inyección SQL Basada en Tiempo No Autenticada ORDER BY ภาษาไทย Resumen Ejecutivo Campo| Detalle ---|--- ID CVE| CVE-2026-1581 Plugin| wpForo Forum Versiones Afectadas| = 2.4.14 Versión Corregida| 2.4.15 Tipo de Vulnerabilidad| Inyección SQL Basada en Tiempo N...

CVE-2026-65761

CVE-2026-65761 — Inyección SQL sin autenticación previa en EasyStore Joomla Dirección filtersortby → Inyección ORDER BY → Lectura completa de la BD Resumen CVE-2026-65761 CVSS 9.3 Crítico es una inyección SQL sin autenticación en EasyStore para Joomla de JoomShaper, que afecta a las versiones ≤...

CVE-2026-101110

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101108

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

EUVD-2026-88436

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110

The Book Library (Free) Joomla Extension by ordasoft.com (versions

CVE-2026-101110 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101108

The Vehicle Manager (Free) Joomla extension by ordasoft.com is vulnerable to an unauthenticated SQL Injection in versions prior to 6.5.8 . The flaw exists in site/vehiclemanager.php, where the order_field and order_direction parameters are processed at three frontend entry points (category listin...

CVE-2026-101108 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

EUVD-2026-88432

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

XWiki Platform - SQL Injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...