Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

CVE-2021-43609-POC

Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites root@kitploit: apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle...

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

Exploit CVE-2021-36396 Descripción Este repositorio contiene un exploit basado en Python dirigido a CVE-2021-36393, una vulnerabilidad grave encontrada en la función de cursos recientes de Moodle. El fallo reside en el parámetro 'sort', permitiendo ataques de inyección SQL que pueden conducir a u...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter CVE-2019-2196 Security Advisory Android AOSP Download Provider SQL Injection in Query Sort Parameter CVE-2019-2196 Demo...

CVE-2008-4687-exploit

CVE-2008-4687-exploit Exploit rápido y sucio en Python para CVE-2008-4687. Descripción por NIST: manageprojpage.php en Mantis anterior a 1.1.4 permite a usuarios autenticados remotos ejecutar código arbitrario a través de un parámetro sort que contiene secuencias PHP, las cuales son procesadas po...

CVE-2025-32429

CVE-2025-32429 PoC de Inyección SQL en XWiki Autor: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerabilidad: Inyección SQL Ciega en la API REST de XWiki LiveData Archivo Afectado: getdeleteddocuments.vm parámetro sort Descripción : Existe una vulnerabilidad de Inyección SQL Ciega en...

CVE-2026-25746_SqlInjectionVulnerabilityOpenEMR7.0.4

CVE-2026-25746 - Vulnerabilidad de inyección SQL en OpenEMR Debilidad CWE-89 Neutralización incorrecta de elementos especiales utilizados en un comando SQL 'Inyección SQL' El producto construye todo o parte de un comando SQL utilizando entrada influenciada externamente desde un componente upstrea...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 PoC de Inyección SQL no autenticada -blue Atacantes no autenticados pueden inyectar SQL arbitrario en la cláusula ORDER BY a través del parámetro sort del endpoint render-map de Geo Mashup, permitiendo la extracción ciega basada en tiempo de información sensib...

CVE-2026-79569

MovieRecommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-79569

MovieRecommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

EUVD-2026-72959

MovieRecommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-79569

Movie_Recommend v1.0.0 is affected by a SQL injection vulnerability in the sort parameter at the /loadingmore endpoint. An unauthenticated, remote attacker can send a crafted SQL statement through this parameter to access sensitive database information. The CVSS 3.1 base score is 9.8 (Critical) ,...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 is affected by a SQL injection in the repository trash table . The sort field from HTTP requests is passed directly into the ORDER BY clause without validation against declared sortable columns. Authenticated users with write permission on any container...

CVE-2026-82538 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

PT-2026-86205

CVE-2026-82538 SQLi in ILIAS 9.22, 10.10, 11.3 lets authenticated users with container write access inject arbitrary SQL via sort param. CVSS 8.8. Unpatched—act now. Details: https://t.co/Emh3Jd8yiK ILIAS valtersit CVE CVEAlert infosec SysAdmin cybersecurity Linux devsecops devops developer...

EUVD-2026-70390

WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APIName=channels that allows unauthenticated attackers to order results by arbitrary database columns including users.password and users.recoverPass. Attackers can exploit this orderi...

EUVD-2026-66676

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15...

CVE-2020-15876

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the sort parameter in the /ajaxtable.php API endpoint. This affects address-search.inc.php, alertlog.inc.php,...

CVE-2020-15876

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the sort parameter in the /ajaxtable.php API endpoint. This affects address-search.inc.php, alertlog.inc.php,...