Elite Graphix Elite Cms has a SQL injection vulnerability

Elite Graphix Elite Cms is a Web Content Management written in Php language by Elite Graphix India. A platform for storing and organizing information and documents. Elite Graphix Elite Cms suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL...

GHSA-PGHF-347X-C2GJ SQL Injection via in django-debug-toolbar

Impact With Django Debug Toolbar attackers are able to execute SQL by changing the rawsql input of the SQL explain, analyze or select forms and submitting the form. NOTE: This is a high severity issue for anyone using the toolbar in a production environment. Generally the Django Debug Toolbar tea...

PNPSCADA SQL Injection Vulnerability

A SQL injection vulnerability exists in PNPSCADA that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...

YouPHPTube SQL Injection Vulnerability

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in YouPHPTube version 7.6, which stems from a lack of validation of externally entered SQL statements in database-based applications, and can be exploited by attackers to execute illegal SQL commands...

pg-sql.txt

!/usr/bin/php -q -d shortopentag=on setvar"COMMENTID", ""; if $GET"editcomment" "" $sql = "SELECT FROM " . $dbprefix . "comments WHERE commentid = " . dbSecure$GET"editcomment"; $cme = $db-execute$sql; if $usr-Access 1 || $SESSION"userid" == $cme-fields"userid" // allow user to edit the comment...

Particle Gallery <= 1.0.1 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Particle Gallery setvar"COMMENTID", ""; if $GET"editcomment" "" $sql = "SELECT FROM " . $dbprefix . "comments WHERE commentid = " . dbSecure$GET"editcomment"; $cme = $db-execute$sql; i...