CVE-2026-104667

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

gogs

gogs Here we will be setting up our lab in our SEED Ubuntu 16.04 VM and we need to install the Go Git Service GOGS on our VM first before we can move on to exploiting the SQL injection vulnerability. To setup the VM, here are the steps: Step 1: Install the Database Once we have logged in to the...

CVE-2023-27742

CVE-2023-27742 IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Description IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Vulnerability Type SQL Injection Vendor of Product IDURAR...

CVE-2026-104953

The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

EUVD-2026-94181

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2023-40933-PoC

CVE-2023-40933 El payload de sqlmap para explotar CVE-2023-40933 Payload Información requerida: Nombre de usuario y contraseña válidos Dominio y ruta de la instancia alojada sqlmap -D nagiosxi -T xiusers -u...

CVE-2024-43468_mTLS_go

CVE-2024-43468 Exploit de Inyección SQL de SCCM versión de certificados cliente mTLS desde el llavero de macOS Implementación en Go del exploit CVE-2024-43468 que utiliza el Llavero de macOS para autenticación mTLS sin necesidad de exportar claves del llavero. Adicionalmente: Se agregó soporte de...

CVE-2025-69458

CVE-2025-69458 – Movie Rating System 1.0 SQLi to RCE Unauthenticated WriteUp CVE-2025-69458 – ExploitDB 50622...

SQL-ThinkPHP-5.0.24-RCE-

SQL-ThinkPHP-5.0.24-RCE- SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力...

TheMisfits-CVE-2024-8465-SQLi

CVE-2024-8465 – Prueba de Concepto de Inyección SQL Información del Equipo Nombre del Equipo: The Misfits Miembros del Equipo: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Resumen Este repositorio contiene una aplicación web vulnerable creada como una Prueba de Concept...

moveit-transfer-2023-breach

MOVEit Transfer 2023 Mass Data Breach Incident Details Incident Date: May–June 2023 CVE: CVE-2023-34362 Attack Type: SQL Injection Threat Actor: Cl0p ransomware group Summary In May 2023, a SQL injection vulnerability in MOVEit Transfer was exploited to exfiltrate sensitive data from hundreds of...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - SQL Injection in Online Shopping System Advanced Summary A critical SQL Injection vulnerability was discovered in the Online Shopping System Advanced project by PuneethReddyHC. The flaw resides in action.php, which fails to properly sanitize user input from the...

WordPress Perfect Survey <1.5.2 - SQL Injection

Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection. id: CVE-2021-24762 info: name: WordPress Perfect Survey 1.5.2 - SQL...

XWiki REST API Query - SQL Injection

A SQL injection vulnerability exists in XWiki's REST API query endpoint. An unauthenticated attacker can execute arbitrary SQL queries through the 'q' parameter by manipulating the HQL query, potentially leading to data exfiltration or system compromise. id: CVE-2025-32969 info: name: XWiki REST...