CVE-2025-56381

CVE-2025-56381 — ERPNext / Frappe의 orderby 및 groupby 매개변수를 통한 인증된 SQL 인젝션 📌 요약 ERPNext v15.67.0 및 Frappe Framework v15.72.4에는 frappe.desk.reportview.get API 엔드포인트에 여러 인증된 SQL 인젝션 취약점 이 존재합니다. orderby 또는 groupby 매개변수에 악의적인 입력을 주입하여 임의의 SQL 문을 실행할 수 있습니다. 이를 통해 인증된 사용자보고서에 대한 기본 액세스 권한 보유가 민감한 데이터를...

CVE-2022-45808

CVE-2022-45808 LearnPress プラグイン = 5.0.12 AND time-based blind query SLEEP Payload: csearch=X&orderby=ID...

CVE-2021-35042

CVE-2021-35042 Django SQL 주입 버그 질문: 얼마나 취약한지 탐구해보자? 답변: 무섭다 설치 poetry install poetry run ./manage.py migrate poetry run ./manage.py loaddata dummydata.json 대화형 데모 poetry run ./manage.py runserver 무작위 필드로 정렬하기 http://localhost:8000/?orderby=%22corethingstags%22.%22thingsid%22 로 이동 ?orderby 파라미터가 열...

CVE-2021-35042

CVE-2021-35042 QuerySet.orderby의 신뢰할 수 없는 입력을 통한 SQL 인젝션 설정: 다음을 사용하여 인스턴스를 시작하세요: docker-compose up 이제 다음 URL을 열어 샘플 데이터를 로드하세요: http://localhost:8000/vulapp/setup 그런 다음 취약한 페이지로 이동하세요: http://localhost:8000/vulapp/ 다음 위치에서 매개변수를 악용하세요: http://localhost:8000/vulapp/?orderby=name...

CVE-2025-50383

CVE-2025-50383 説明 低権限の認証ユーザーは、細工されたHTTP POSTリクエストに悪意のあるorderbyパラメータ（例：orderby=IF1=1,SLEEP5,1）を付与することで、この脆弱性を悪用できます。これにより、時間ベースのブラインドSQLインジェクションが引き起こされ、基盤となるMySQLデータベース上で不正なSQL実行が行われ、完全なSQLインジェクションの悪用につながります。 影響を受けるエンドポイント 低権限の認証ユーザー（ロール：顧客およびプロバイダー）が悪用可能: 1. /index.php/customers/search 2...

EasyAppointments 1.5.1 - Blind SQL Injection

Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection Google Dork: N/A backend login required Date: 07/27/2026 Exploit Author: Michael Chesang Vendor Homepage: https://easyappointments.org Software Link: https://github.com/alextselegidis/easyappointments/releases Version: = 1.5.1 REQUIRED...

EasyAppointments 1.5.1 Blind SQL Injection

A blind SQL injection vulnerability exists in the orderby parameter of the /index.php/customers/search endpoint in EasyAppointments versions 1.5.1 and below. The parameter is passed unsanitized to CodeIgniter 3 Query Builder orderby. Parenthesized subqueries bypass backtick escaping via CI3's...

EUVD-2026-66559

Starlette-Admin is a fast, beautiful and extensible administrative interface framework for FastAPI and Starlette applications. Prior to 0.16.1, the list API does not validate user-supplied orderby and structured where field names against the configured sortablefields and searchablefields...

CVE-2026-12941

The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-12941 MultiVendorX <= 5.0.9 - Authenticated (Store Owner+) SQL Injection via 'order_by' Parameter

The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2026-42796

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2026-8978

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2026-8978 OptinCraft <= 1.2.0 - Authenticated (Administrator+) SQL Injection via 'order_by' Parameter

The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2026-8978

The CVE covers OptinCraft

EUVD-2026-32744

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 1.8.40 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

CVE-2026-45800 Vvveb: Authenticated SQL injection in /user/orders via order_by and direction

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an authenticated SQL injection issue in the frontend user order history page in Vvveb CMS. A normal frontend user can log in and access /user/orders. The orderby and...

CVE-2026-2363

The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'orderby' attribute of the wpmemusermembershipposts shortcode in all versions up to, and including, 3.5.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-2363 WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute

The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'orderby' attribute of the wpmemusermembershipposts shortcode in all versions up to, and including, 3.5.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2021-47811 Grocery crud 1.6.4 - 'order_by' SQL Injection

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the orderby parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the orderby parameter in POST requests to the ajaxlist endpoint to potentially extract or modify database...

CVE-2025-14068

The CVE-2025-14068 entry affects the WPNakama WordPress plugin (team/multi-client collaboration and project management tooling). The vulnerability is an unauthenticated time-based SQL Injection via the order_by parameter in all versions up to 0.6.3, caused by insufficient escaping of user input a...