250011 matches found
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-49048-JoomCCK-SQLi
CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection CVSS 9.8 CVE: CVE-2026-49048 Status: Public disclosure. Reported to Joomla Security Strike Team JSST — Ticket 282420. Advisory Summary Field| Value ---|--- Advisory ID| JOOMCCK-2026-001 CVE| CVE-2026-49048 Product| JoomCCK comjoomcck —...
CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit
CMS-Made-Simple-2.2.10---SQL注入漏洞利用（含Bug修复） 该漏洞利用已修正以支持Python 3 CVE-2019-9053 原始漏洞利用来源：https://www.exploit-db.com/exploits/46635 可能的错误及其修复 Traceback most recent call last: File "46635.py", line 12, in from termcolor import colored ImportError: No module named termcolor 修复方法 pip install termcolor...
CVE
Tabla de CVEs Número de CVE| Tipo| Empresa/Producto| Descripción| Enlace del Artículo| Enlace del Repositorio ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows julio de 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP...
CVE-2023-1454
CVE-2023-1454 jmreport/qurestSql Unauthorized SQL Injection Batch Scan POC Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Description Original tool URL The original tool h...
patch-CVE-2026-03200
Parche: CVE-2026-03200 Detalles de la vulnerabilidad CVE : CVE-2026-03200 Producto : Progress MOVEit Descripción : Inyección SQL Gravedad : Crítica Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-01-15 Estado| desplegado Desplegado en| Producción Validado por| Equipo de...
local-gov-sqli-poc-and-remediation
Penetration Testing PoC and Portfolio — Luqman Hadi Autho...
CVE-2024-1071
CVE-2024-1071 Ultimate Member 未授权数据库访问 / SQL 注入 PoC 现已发布。 它仅用于教育/研究目的！使用风险自负！...
CVE-2025-45809-PoC
CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4（v1.81.0 之前版本）的 /key/block 和 /key/unblock 端点 中的 key 参数存在 SQL 注入漏洞 。攻击者可利用基于时间的盲注技术 窃取数据库内容、读取服务器文件。 Field| Value ---|--- CVE| CVE-2025-45809 GHSA| GHSA-cgmh-xxmq-hp46 CVSS v3.1| 5.4 MEDIUM —...
cve-2026-28576
CVE-2026-28576: Inyección SQL y exfiltración sistémica en Android Contacts Provider Resumen ejecutivo CVE-2026-28576 es una vulnerabilidad crítica de control de acceso en el framework Android Contacts Provider ContactsProvider2.queryLocal. El fallo permite que una aplicación sin privilegios...
OpenSource-ERP-SQL-Injection
OpenSource-ERP-SQL-Injection La aplicación OpenSource ERP tiene una vulnerabilidad de inyección SQL. CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - Obtener nombre de la BD POST /db/utils/query/data.xml HTTP/1.1 User-Agent: Mozilla/5.0 Windows N...
Joomla3.7-SQLi-CVE-2017-8917
摘要 这是一个使用ZoomEye API批量扫描Joomla 3.7 SQL注入（CVE-2017-8917）的简单脚本。 使用方法 git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py 开始！！！ 参考 https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html...
CVE-2022-0739
CVE-2022-0739 Exploit de prueba de concepto SQLI BookingPress anterior a 1.0.11 DESCARGO DE RESPONSABILIDAD El uso de este programa sin consentimiento mutuo previo puede considerarse una actividad ilegal. Es responsabilidad del usuario final cumplir con todas las leyes locales, estatales y...