Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection

Team WordPress plugin = 5.0.11 contains a SQL injection caused by improper sanitization and escaping of a parameter in an AJAX action accessible to unauthenticated users, letting remote attackers execute arbitrary SQL commands. id: CVE-2025-14124 info: name: Team WordPress Plugin TLP Team = 5.0.9...

WP Hotel Booking <= 2.0.7 - SQL Injection

WP Hotel Booking WordPress plugin before 2.0.8 contains a SQL injection caused by lack of authorization, CSRF checks, and input escaping in a function hooked to admininit, letting unauthenticated users perform SQL injections, exploit requires no authentication. id: CVE-2023-5652 info: name: WP...

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

Mingsoft MCMS - SQL Injection

SQL injection vulnerability in Mingsoft MCMS up to 5.2.9 via the sqlWhere parameter in /cms/category/list. id: CVE-2022-4375 info: name: Mingsoft MCMS - SQL Injection author: ritikchaddha severity: critical description: | SQL injection vulnerability in Mingsoft MCMS up to 5.2.9 via the sqlWhere...

WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection

ChatBot plugin for WordPress up to 4.8.9 contains a sqlinjection caused by insufficient escaping and lack of preparation on the $strid parameter, letting unauthenticated attackers extract sensitive data, exploit requires no authentication. id: CVE-2023-5204 info: name: WordPress AI ChatBot WPBot ...

Jinher OA - SQL Injection

jinher jinheroa is an office automation software that facilitates workflow management and collaboration within organizations. It sits in the enterprise layer of the tech stack, is typically deployed as selfhosted, and—within the informationtechnology industry—serves the businessapps domain. id:...

CRM Perks Forms <= 1.1.4 - SQL Injection

CRM Perks CRM Perks Forms affected versions 1.1.4 and earlier contains a SQL injection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL commands, exploit requires user interaction. id: CVE-2024-30498 info: name: CRM Perks Forms ...

VidShop for WooCommerce <= 1.1.4 - SQL Injection

VidShop – Shoppable Videos for WooCommerce plugin for WordPress = 1.1.4 contains a time-based SQL injection caused by insufficient escaping of the 'fields' parameter, letting unauthenticated attackers extract sensitive database information. id: CVE-2026-0702 info: name: VidShop for WooCommerce =...

Atom.CMS 2.0 - SQL Injection

Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminuploads.php which allows an attacker to execute arbitrary SQL commands. id: CVE-2022-28033 info: name: Atom.CMS 2.0 - SQL Injection author: ritikchaddha severity: critical description: | Atom.CMS 2.0 is vulnerable to SQL Injection via...

ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection

ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...

PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection

PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection blind via the sbcategory parameter. id: CVE-2021-36748 info: name: PrestaHome Blog for PrestaShop 1.7.8 - SQL Injection author: whoever severity: high description: PrestaHome Blog for PrestaShop prior to versio...

Tutor LMS <= 2.1.10 - SQL Injection

Tutor LMS – eLearning and online course solution plugin for WordPress all versions up to 2.6.1 contains a time-based SQL Injection caused by insufficient escaping on the questionid parameter in SQL queries, letting authenticated attackers with subscriber or higher access extract sensitive...

WordPress Collapsing Categories <= 3.0.8 - SQL Injection

Collapsing Categories plugin for WordPress = 3.0.8 contains a sqlinjection caused by insufficient escaping of 'taxonomy' parameter in /wp-json/collapsing-categories/v1/get REST API, letting unauthenticated attackers execute arbitrary SQL queries, exploit requires sending crafted 'taxonomy'...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit 利用Android下载提供程序排序参数中SQL注入的PoC CVE-2019-2196 安全公告 Android AOSP 下载提供程序查询排序参数中的SQL注入 CVE-2019-2196 演示...

operative-framework

operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules. important The project has undergone a...

CVE-2025-28346

漏洞类型 SQL 注入 描述 在 Ticket-Booking-App - 1.0 中发现了一个基于时间的盲 SQL 注入漏洞，攻击者可通过该漏洞对底层数据库执行任意 SQL 查询。存在漏洞的参数未正确过滤用户提供的输入，允许注入依赖时间延迟来推断漏洞存在的恶意 SQL 载荷。 与经典的 SQL 注入不同，基于时间的盲 SQL 注入不会直接返回数据。相反，攻击者根据应用程序响应的时间来判断注入是否成功。 产品供应商 Code-project 受影响产品代码库 Ticket-Booking-App - 1.0 受影响组件 Email 参数容易受到基于时间的 SQL 注入攻击 攻击类型 远程...

CVE-2024-1698-Exploit

CVE-2024-1698 利用脚本 - WordPress NotificationX = 2.8.2 - SQL注入 这是一个用于通过利用 CVE-2024-1698 来发现 WordPress 管理员用户名和密码哈希的利用脚本。 此 Python 脚本仅供教育目的使用。它演示了如何利用 CVE-2024-1698 SQL 注入漏洞从 WordPress 网站的 NotificationX Analytics API 中提取管理员凭据（用户名和密码哈希）。请负责任地使用此脚本，且仅用于已获得授权测试的系统。未经授权或恶意使用是严格禁止的。 免责声明...

SqliSniper

功能特点 • 安装 • 使用方法 • 运行 SqliSniper • 贡献 • SqliSniper 是一个强大的 Python 工具，用于检测 HTTP 请求头中的基于时间的盲 SQL 注入。它通过多线程快速扫描并识别潜在漏洞，提高了安全评估过程的效率和速度。与其他扫描器不同，SqliSniper 旨在消除误报，并在检测到漏洞时发送警报，内置了 Discord 通知功能。 关键功能 基于时间的盲 SQL 注入检测： 精准定位 HTTP 头中的潜在 SQL 注入漏洞。 多线程扫描： 通过并发处理提供更快的扫描能力。 Discord 通知： 检测到漏洞时通过 Discord Webhook...

CVE-2023-25157

漏洞描述 由于未对用户输入进行过滤，远程未授权攻击者可以构造畸形的过滤语法，绕过GeoServer的词法解析从而造成SQL注入，获取服务器中的敏感信息，甚至可能获取数据库服务器权限。 影响版本 GeoServer 2.20.x 2.20.7 GeoServer 2.19.x 2.19.7 GeoServer 2.18.x 2.18.7 GeoServer 2.21.x 2.21.4 GeoServer 2.22.x 2.22.2 POC 获取可用的功能名称 搜索 /geoserver/ows?service=WFS&version=1.0.0&request=GetCapabilitie...

CVE-2025-24659

CVE-2025-24659 1️⃣ Tipo de componente Plugin de WordPress 2️⃣ Detalles del componente Nombre del componente Premium Packages – Sell Digital Products Securely Versión vulnerable = 5.9.6 Slug del componente wpdm-premium-packages Enlace del componente...