CVE-2022-23046

CVE-2022-23046 PHPIPAM 1.4.4 - SQLi（已认证） 原始漏洞利用脚本可在此处找到 原始漏洞利用脚本作者： Rodolfo "Inc0gbyt3" Tavares 针对 CVE-2022-23046 的修改脚本 我在运行原始脚本时遇到了问题。于是根据我的使用场景对其进行了修改。 在完成 THM 实验房间 Ollie 的过程中使用。...

CVE-2025-32429

CVE-2025-32429 – Inyección SQL en sentencias preparadas PDO de PHP Este repositorio contiene un exploit de prueba de concepto para CVE-2025-32429 , una vulnerabilidad que afecta a las sentencias preparadas PDO de PHP cuando la emulación está habilitada. 📄 Referencias Investigación original por...

exploit-joomla

exploit-joomla Un exploit simple que aprovecha CVE-2015-7297, CVE-2015-7857 y CVE-2015-7858 para enumerar usuarios con la contraseña de la base de datos. Exploit Title : Joomla 3.2 to 3.4.4 Remote SQL Injection Mass Exploit Date : 12-09-2020 Requisitos : Python 3.4.x , Requests module python -m p...

CVE-2015-1397

POC for CVE-2015-1397 Magento SQL注入。 了解更多：https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

CVE-2025-50867

在CloudClassroom-PHP-Project 1.0的takeassessment2.php端点中存在SQL注入漏洞，Q5 POST参数未经清理直接嵌入SQL语句中。 漏洞类型 : SQL注入 产品供应商 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 受影响产品代码库 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 1.0 -...

CVE-2025-6970

CVE-2025-6970 Events Manager = 7.0.3 - 未认证的SQL注入 via orderby 参数 描述 Events Manager – Calendar, Bookings, Tickets, and more! WordPress插件存在基于时间的SQL注入漏洞，漏洞位于'orderby'参数中，影响所有版本至7.0.3（含）。由于对用户提供的参数转义不足，且对现有SQL查询缺乏充分的预处理，未认证攻击者可以将额外的SQL查询附加到已有查询中，从而从数据库中提取敏感信息。 详情 类型 : 插件 Slug : events-manager 受影响版本 :...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX 未认证 SQL 注入 → 远程代码执行 针对 FreePBX Endpoint Manager 未认证 SQL 注入（CVE-2025-57819）的一键利用程序，通过 FreePBX cronjobs 表桥接实现远程代码执行。 仅限授权的安全测试 / CTF 使用。 漏洞 Endpoint 模块的 Ajax 处理器将 brand 参数直接拼接到 SQL 查询中，且模块路径 FreePBX\modules\endpoint\ajax 绕过了 Ajax 的 Referrer / 认证检查。这提供了一个未认证 的基于错误的 SQL 注入（通过...

CVE-2026-41490

CVE-2026-41490 — SQL Injection in Dagster database I/O managers via dynamic partition keys Severity : High CVSS 8.3 CWE : CWE-89 — SQL Injection Affected : Dagster core = 1.13.0 and integration packages = 0.29.0 Fixed in : Dagster core 1.13.1 and integration packages 0.29.1 Advisory :...

CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - Inyección SQL en Institute of Current Students Resumen El punto final loginlinkfaculty en la aplicación Institute-of-Current-Students es vulnerable a Inyección SQL a través del parámetro POST fid. El parámetro no se sanitiza correctamente antes de ser utilizado en una consulta SQ...

lazyweb

LazyWeb - Aplicación Web Vulnerable LazyWeb es una aplicación web de demostración diseñada para mostrar vulnerabilidades comunes del lado del servidor. Cada vulnerabilidad está categorizada con su respectiva calificación de dificultad para proporcionar una experiencia de aprendizaje integral para...

CVE-2022-21661

CVE-2022-21661 1.简介 WordPress v4.1v5.8.2 WPQuery SQL Injection POC 2.用法 poc -h 192.168.1.1 // 单个扫描 poc -f host.txt // 批量扫描 3.免责声明 此工具仅用于学习、研究和自查。 不应用于非法目的，请遵守相关法律法规。 使用本工具产生的任何风险与本人无关！...

CVE-2024-37843-POC

CVE-2024-37843-POC CVE-2024-37843 的 POC。Craft CMS 基于时间盲注 SQL 注入 详情见博客 POC curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \\ \n \n LIMIT 5 AS subquery\nINNER JOIN assets assets ON assets.id =...

CVE-2026-63030-POC

wp2shell — CVE-2026-63030 + CVE-2026-60137 Cadena de exploits RCE de un día para WordPress. Sin autenticación. CVSS 9.8. Cero dependencias — solo stdlib de Python 3.8+. Versiones afectadas Rama| Vulnerable| Parcheada ---|---|--- 6.9.x| 6.9.0 – 6.9.4| ≥ 6.9.5 7.0.x| 7.0.0 – 7.0.1| ≥ 7.0.2 La caden...

NginxHunter

NginxHunter 描述 NginxHunter 是一款综合性工具，用于分析 Nginx 访问日志中的安全漏洞和可疑活动。它可以检测 SQL 注入尝试、扫描工具、敏感路径访问、利用尝试、WebShell 等。非常适合希望增强 Nginx 服务器安全的系统管理员和安全专业人员。 使用方法 使用 root 权限 $ wget https://raw.githubusercontent.com/emrekybs/NginxHunter/main/nginxsecurityhunter.sh -O nginxsecurityhunter.sh && chmod +x...

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956 的 PoC，ValvePress Automatic 插件中的 SQL 注入漏洞。该 PoC 利用此漏洞在目标站点中创建用户并赋予管理员权限。在 WordPress 中获得管理员权限可导致远程代码执行。 使用方法 git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py http://target.com Payloads 创建用户的 SQL 注入 payload： q=INSE...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...