260438 matches found
CVE-2023-25157-GeoServer-SQLi-Lab
GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno de práctica Laboratorio Vulnerable e informe detallado de análisis de explotación de la vulnerabilidad SQL Injection Error-based en GeoServer CVE-2023-25157 y la biblioteca...
CVE-2026-4889
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
CVE-2026-42414
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42415
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
CVE-2026-42416
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
CVE-2026-42417
Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...
CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-39795
Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...
CVE-2026-39785
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
CVE-2026-39771
Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...
CVE-2026-39764
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...
CVE-2026-39747
Subscriber SQL Injection in Woffice = 5.4.35 versions...
CVE-2026-39746
Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...
CVE-2026-32581
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...
CVE-2026-32580
Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...
CVE-2026-32557
Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...
CVE-2026-105317
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
CVE-2026-25434
Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...
CVE-2025-70149-SQL-Injection
CVE-2025-70149 — SQL注入研究项目 概述 安全研究项目，演示了CodeAstro Membership Management System v1.0中一个严重SQL注入漏洞（CVSS 9.8/10）CVE-2025-70149的利用与缓解措施。 CVE详情 字段| 值 ---|--- CVE ID| CVE-2025-70149 CVSS 评分| 9.8 严重 类型| SQL注入（CWE-89） 是否需要认证| 否 实验环境搭建 攻击机：Kali Linux 192.168.63.5 目标机：Windows 10 + XAMPP 192.168.63.6 工具：sqlm...
