CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953

The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

EUVD-2026-94181

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2023-40933-PoC

CVE-2023-40933 The sqlmap payload to exploit CVE-2023-40933 Payload Required Information: Valid Username and Password Domain and path of hosted instance sqlmap -D nagiosxi -T xiusers -u "https:///nagiosxi/admin/bannermessage-ajaxhelper.php?action=updatebannermessagesettings&id=3&token=curl -ksX...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL Injection Exploit mTLS client certs from MacOS keychain version Go implementation of CVE-2024-43468 exploit that uses macOS Keychain for mTLS authentication without need to export keys from keychain. Additionally: Added proxy support to not use problematic proxychains. Add...

CVE-2025-69458

CVE-2025-69458 – Movie Rating System 1.0 SQLi to RCE Unauthenticated WriteUp CVE-2025-69458 – ExploitDB 50622...

SQL-ThinkPHP-5.0.24-RCE-

SQL-ThinkPHP-5.0.24-RCE- SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力...

TheMisfits-CVE-2024-8465-SQLi

CVE-2024-8465 – SQL Injection Proof of Concept Team Information Team Name: The Misfits Team Members: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Overview This repository contains a vulnerable web application created as a Proof of Concept PoC to demonstrate an SQL...

moveit-transfer-2023-breach

MOVEit Transfer 2023 Mass Data Breach Incident Details Incident Date: May–June 2023 CVE: CVE-2023-34362 Attack Type: SQL Injection Threat Actor: Cl0p ransomware group Summary In May 2023, a SQL injection vulnerability in MOVEit Transfer was exploited to exfiltrate sensitive data from hundreds of...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - 온라인 쇼핑 시스템 Advanced에서의 SQL 인젝션 요약 Online Shopping System Advanced 프로젝트PuneethReddyHC 개발에서 심각한 SQL 인젝션 취약점이 발견되었습니다. 이 결함은 action.php에 있으며, keyword POST 매개변수에서 사용자 입력을 제대로 살균하지 못합니다. 공격자는 악성 SQL을 주입하여 데이터를 추출하거나 데이터베이스를 조작할 수 있습니다. 기술 세부 사항 취약점 유형 : SQL 인젝션 영향 받는 파일...

WordPress Perfect Survey <1.5.2 - SQL Injection

Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection. id: CVE-2021-24762 info: name: WordPress Perfect Survey 1.5.2 - SQL...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

WordPress PayPal Pro <1.1.65 - SQL Injection

WordPress PayPal Pro plugin before 1.1.65 is susceptible to SQL injection via the 'query' parameter which allows for any unauthenticated user to perform SQL queries with the results output to a web page in JSON format. id: CVE-2020-14092 info: name: WordPress PayPal Pro 1.1.65 - SQL Injection...

Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...