CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 White Hat 3rd Cohort Class 30 Kim Jeong-woo github link - https://github.com/custiya/geoserver-CVE-2023-25157 Vulnerability Summary CVE-2023-25157 is an SQLi vulnerability that occurred in GeoServer, an open-source map data service web application. Occurs in some versions...

lab-cve-2025-57819

Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi → RCE Chain Nuclei POC Spin up a reproducible FreePBX 15 lab Docker to validate CVE-2025-57819 — a critical unauthenticated SQL injection in userman AJAX endpoints that can be chained to RCE. Includes a working Nuclei template...

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 docker and poc functions.php needs to replace the original functions.php in the image, and mount it directly in docker-compose.yml poc POST /wp-admin/admin-ajax.php HTTP/1.1 Host: your-ip:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:132.0 Gecko/201001...

CVE-2025-22785

CVE-2025-22785 Course Booking System = 6.0.5 - Unauthenticated SQL Injection Description The Course Booking System plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2023-1545

CVE-2023-1545 Simple SQL Injection Python script for Teampass prior to versions 3.0.0.23, leveraging CVE-2023-1545. More information on this blog. Usage Just use set the URL where Teampass is running as unique argument: python3 CVE-2023-1545.py http://example.com:8080 Discliamer Use it for ethica...

CVE-2025-65950

CVE-2025-65950: WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups Parameter Overview Field| Details ---|--- CVE ID| CVE-2025-65950 Severity| CRITICAL Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A critical SQL Injection...

wp_bookingpress_1.0.11

CVE-2022-0739 CVE-2022-0739 Plugin BookingPress de Wordpress 1.0.11 Inyección SQL no autenticada Comenzando Ejecutando el programa Con python3 python3 sqli.py -u 'http://wordpress.site' -p 'wpnoncevalue' Ayuda Para el menú de ayuda: python3 sqli.py -h Descargo de responsabilidad Todo el código...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - SQL Injection Vulnerability in the "email" Parameter During "savestaff" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

CVE-2023-31717

CVE-2023-31717 It is possible to do SQL Injection into the HTTP POST id parameter passed in the body as json, being able to extract confidential information from the SQLite database Payload - "id":"n7c734712-aabf4eb3' AND 2630=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2 AND...

cve-2023-42413

cve-2023-42413 ecology9sql...

osquery

osquery osquery es un framework de instrumentación, monitoreo y análisis de sistemas operativos impulsado por SQL. Disponible para Linux, macOS y Windows. Información y recursos Página principal: osquery.io Descargas: osquery.io/downloads Documentación: ReadTheDocs Stack Overflow: Preguntas en...

CVE-2026-48842

CVE-2026-48842 PoC — Roundcube virtuserquery pre-auth SQLi Poc for CVE-2026-48842 , a pre-auth SQL injection in the optional virtuserquery plugin of Roundcube Webmail. The tool does two things and refuses to guess about either: 1. Confirms the injection with a true/false differential not a single...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 📖 Description This repository contains a high-performance, parallelized...

CVE-2026-59508

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0...

recox

Recox v2.0 RecoX es una herramienta increíblemente versátil y potente, diseñada específicamente para ayudar en la identificación y clasificación de vulnerabilidades en aplicaciones web. El script es capaz de detectar vulnerabilidades que no suelen estar incluidas en la lista de las diez...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc Prueba de concepto PoC de inyección SQL ciega basada en tiempo no autenticada para el endpoint VERMAJAXfunctions.php de VICIdial CVE-2024-8503. El proyecto está destinado únicamente a pruebas de seguridad autorizadas, validación y educación. Resumen...

CVE-2026-59508 Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0...

EUVD-2026-97110

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0...

CVE-2026-59508

The software Interuse i-Bos version 3.0 is vulnerable to an SQL injection vulnerability (CWE-89) caused by the improper neutralization of special elements used in SQL commands. The impact allows for a high level of confidentiality breach, although integrity and availability are not affected. No s...