EUVD-2026-93885

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-79798 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-79798 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-79798

The ClearPass Policy Manager web-based management interface contains SQL injection vulnerabilities that can be exploited by a low-privileged authenticated remote attacker. Successful exploitation allows the attacker to execute arbitrary database commands against the ClearPass Policy Manager insta...

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-79794

The ClearPass Policy Manager web-based management interface contains a SQL injection vulnerability . This flaw allows an authenticated remote attacker to perform SQL injection attacks against the ClearPass Policy Manager instance. If successfully exploited, an attacker could execute arbitrary dat...

EUVD-2026-93882

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-76754

An unauthenticated remote attacker can exploit a vulnerability in an affected interface of ClearPass Policy Manager to perform SQL injection attacks. Successful exploitation allows the attacker to execute arbitrary database commands against the instance. No specific affected versions or remediati...

EUVD-2026-93881

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-61797

CVE-2026-61797 — GLPI PDF プラグイン 時間ベースブラインド SQL インジェクション CVE-2026-61797 の概念実証（PoC）。GLPI PDF プラグインに影響を与える時間ベースブラインド SQL インジェクション脆弱性です。 この脆弱性は以下を通じて到達可能です： /marketplace/pdf/front/preference.form.php 脆弱な実装では、item POST 配列からのユーザー制御値が、適切なパラメータ化なしに SQL クエリに挿入されます。 認証済みの低権限 GLPI ユーザーは、この動作を悪用して SQL...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX 사전 인증 SQL 삽입을 통한 원격 코드 실행 CVE-2025-57819 를 위한 올인원 익스플로잇입니다. FreePBX의 엔드포인트 모듈에 있는 인증되지 않은 SQL 삽입 취약점으로, 크론 작업 삽입을 통해 원격 코드 실행으로 이어집니다. CVSS : 9.8 심각 — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : 2025년 8월 29일 추가 영향 : Sangoma FreePBX 15, 16, 17, 엔드포인트 모듈 │ ▼ SQL...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 検出および対応キット CVE-2026-76461 の検出、ハンティング、および修復リソース。これは Cisco Secure Email Gateway SEG 向け Cisco AsyncOS における重大な SQL インジェクション脆弱性です。 ⚠️ 免責事項 このリポジトリには防御的なコンテンツのみ が含まれています: Sigma ルール、YARA ルール、技術分析、侵害指標 IoC、および修復ガイダンスです。 エクスプロイトコード、PoC、または武器化されたツールは含まれていません。 この脆弱性は CISA の Known Exploited...

CVE-2020-7471

CVE-2020-7471 SQL injection via StringAgg delimeter input Setup: Run ./setup.sh for initial setup Open the docker image to initiate the database: docker exec -it containerid /bin/bash And run the following commands: python manage.py makemigrations vulapp python manage.py migrate Start the instanc...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105856

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2019-9053-exploit

CVE-2019-9053 — CMS Made Simple의 인증되지 않은 SQL 인젝션 설명 CVE-2019-9053 은 CMS Made Simple ≤ 2.2.9 버전에 영향을 주는 시간 기반 블라인드Time-based Blind SQL 인젝션 취약점입니다. 인증이 필요하지 않습니다. 취약한 매개변수는 News 모듈moduleinterface.php의 m1idlist입니다. 공격자는 이를 악용하여 관리자 비밀번호 해시, 사용자 이름, 이메일 및 해시에 사용된 salt를 추출할 수 있습니다. 비밀번호 저장 방식은 MD5salt...