282210 matches found
CVE-2024-32136
BWL Advanced FAQ Manager 2.0.3 - 인증 후 SQL 인젝션 익스플로잇 제목: BWL Advanced FAQ Manager 2.0.3 - 인증 후 SQL 인젝션 날짜: 2024년 4월 14일 익스플로잇 작성자: Ivan Spiridonov xbz0n 소프트웨어 링크: https://codecanyon.net/item/bwl-advanced-faq-manager/5007135 버전: 2.0.3 테스트 환경: Ubuntu 20.04 CVE: CVE-2024-32136 SQL 인젝션 SQL 인젝션은 공격자가...
CVE-2026-105386
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
CVE-2026-105387
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...
CVE-2026-103352
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-105388
A SQL injection vulnerability exists in feelec-yishu feelcrm-os version 1.0.0 . The flaw is located in the index function of the App/Feelcrm/Index/Controller/MemberController.class.php file within the Member Endpoint component. Improper handling of the group_id argument allows an attacker to perf...
CVE-2026-105388 feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the argument groupid causes sql injection. The attack can be...
CVE-2026-105388 feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the argument groupid causes sql injection. The attack can be...
EUVD-2026-92765
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the argument groupid causes sql injection. The attack can be...
CVE-2026-71298 Maestro: sql identifier injection via properties.* search filter and orderby field
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database...
CVE-2026-71298
A SQL injection vulnerability exists in maestro within the orderBy query parameter of its REST API list endpoints. This flaw allows a remote attacker to perform read-only blind extraction of data from the database without authentication. To mitigate this risk, users should restrict network access...
CVE-2026-71298 Maestro: sql identifier injection via properties.* search filter and orderby field
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database...
EUVD-2026-92757
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database...
CVE-2026-71298
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database. Mitigation To mitigate this...
CVE-2024-1512
CVE-2024-1512 개념 증명 취약점 개요 CVE-2024-1512는 MasterStudy LMS WordPress 플러그인, 특히 /lms/stm-lms/order/items REST 경로의 구현에서 중요한 취약점을 노출합니다. 이 문제는 플러그인이 'user' 매개변수를 적절히 이스케이프하지 못하고 SQL 쿼리를 부적절하게 준비한 데서 발생합니다. 결과적으로 공격자는 'user' 매개변수를 조작하여 쿼리에 악성 SQL 코드를 삽입할 수 있습니다. 이 취약점은 UNION 기반 SQL 인젝션 공격을 용이하게 하며, 공격자...
CVE-2026-103066
The WP BASE Booking WordPress plugin (versions 6.4.0 and below ) is vulnerable to a Blind SQL Injection flaw. The root cause is the Improper Neutralization of Special Elements used in an SQL Command , which allows an attacker to execute malicious SQL queries. While the documents confirm the vulne...
EUVD-2026-92753
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-103066 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
CVE-2026-103066 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
Exploit-Joomla
ep4-redes Joomla! 3.7.0의 CVE-2017-8917 SQL 인젝션 취약점 익스플로잇 취약점에 대한 설명: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html...
cve-2025-57819-exploit
CVE-2025-57819 익스플로잇 메타데이터 심각도: 치명적 9.8 벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 유형: 인증되지 않은 SQL 인젝션 → 원격 코드 실행 영향받는 소프트웨어: FreePBX endpoint 모듈 매개변수 : 대상 호스트명 또는 IP 주소 취약한 FreePBX 인스턴스 : 리버스 쉘 콜백을 위한 공격자 IP 주소 : 수신 연결을 위한 리스닝 포트 예시: python3 cve-2025-57819.py freepbx.local 10.10.16.38 9999...