CVE-2022-0739

CVE-2022-0739 BookingPress 1.0.11 - Unauthenticated SQL Injection The plugin fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpressfrontgetcategoryservices AJAX action available to unauthenticated users, leading to an...

CMS-Made-Simple-2.2.10---SQL-Injection

CMS-Made-Simple-2.2.10---SQL-Injection Google Dorks for detecting CMS Made Simple 2.2.10 SQL Injection CVE-2019-9053. Built for security auditing and patch verification...

CVE-2017-8917-Joomla

CVE-2017-8917-Joomla Python script to exploit the CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 Created for educational purposes only. Used for the TryHackMe Dailybugle CTF Advisory All the scripts/binaries in this repository should be used for authorized penetration testing and/or...

OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

CVE-2023-49954.github.io

SQL Injection in 3CX CRM Integration For the CRM integration, 3CX ships templates for connecting to various databases. In these templates, placeholders FirstName,SearchText,Email are used to populate the queries. User input is not sanitized and thus enables SQL injections. Affected Versions no...

CVE-2023-27742

CVE-2023-27742 IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Description IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Vulnerability Type SQL Injection Vendor of Product IDURAR...

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA UDDI Component SQL Injection POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type:...

teler-waf

teler-waf teler-waf is a comprehensive security solution for Go-based web applications. It acts as an HTTP middleware, providing an easy-to-use interface for integrating IDS functionality with teler IDS into existing Go applications. By using teler-waf, you can help protect against a variety of...

webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

CVE-2026-92997

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92998

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-110651

The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author role and above to perform SQL injection attacks...

CVE-2026-102499

The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a SQL statement, which allows authenticated users with Subscriber-level access and above to append additional SQL...

explo

explo explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo is able to exploit security issues without the need of writing a script. This allows to share complex vulnerabilities in a simple readable and...

CVE-2026-92997 Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92998 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92997

The Click n Chat (Chat Widget Integration) WordPress plugin, in versions prior to 1.1.3 , is vulnerable to SQL injection . The root cause is the improper validation of a parameter used as a column identifier within a SQL query. This flaw allows unauthenticated attackers to perform SQL injection a...

CVE-2026-92998 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-92998

The Click n Chat (Chat Widget Integration) WordPress plugin versions before 1.1.3 is vulnerable to SQL injection . The root cause is the failure to sanitise sort parameters before they are used in a SQL ORDER BY clause. This flaw allows unauthenticated attackers to perform SQL injection attacks, ...

CVE-2026-92997 Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...