Lucene search
+L

271738 matches found

Kitploit
Kitploit
•added 2026/10/04 12:05 a.m.•21 views

CVE-2023-6063-PoC

CVE-2023-6063 PoC Reference Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2 | WPScan Plugin setting Enable "WP Fastest Cache". PoC The "wordpressloggedin" cookie parameter is vulnerable. $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php"...

7.5CVSS7.8AI score0.73708EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/10/04 12:02 a.m.•15 views

HBSQLI

HBSQLI: Automated Tester For Header Based Blind SQL Injection HBSQLI is an automated command-line tool for performing Header Based Blind SQL injection attacks on web applications. It automates the process of detecting Header Based Blind SQL injection vulnerabilities, making it easier for security...

6.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•5 views

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.7CVSS7.3AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•56 views

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

9CVSS5.8AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•53 views

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.7CVSS6.2AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•32 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

9CVSS6.3AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•32 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•30 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•29 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•30 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•29 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•50 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•55 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

10CVSS6.3AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:57 p.m.•31 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
Kitploit
Kitploit
•added 2026/10/03 11:57 p.m.•17 views

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

6.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/10/03 11:56 p.m.•12 views

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.8CVSS7.3AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/03 11:43 p.m.•11 views

CVE-2026-54596

CVE-2026-54596 - Authenticated SQL Injection via recurringinvoicefrequency Parameter Enables Full Database Exfiltration Severity: High Advisory: GHSA-f9m3-qjc9-v27j Fixed in: Commit 7211426 Author: iltosec Summary An SQL injection vulnerability in ITFlow's recurring invoice creation endpoint allo...

8.1CVSS6.2AI score0.00478EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/03 11:40 p.m.•15 views

CVE-2021-3262

CVE-2021-3262 SQL Injection in TripSpark VEO Transportation / NovusEDU The public "Student Busing Information" lookup page shipped with TripSpark VEO Transportation takes unauthenticated POST body input and concatenates it into a SQL Server query without parameterisation or server-side validation...

9.8CVSS8.3AI score0.0103EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/10/03 11:38 p.m.•12 views

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...

9.8CVSS7.6AI score0.40287EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/03 11:36 p.m.•12 views

Scanner-and-Patcher

Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...

6.3AI score
SaveExploits0References4
Rows per page
Query Builder