CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - ثغرة حقن SQL في editcustomer عبر معامل 'id' في عنوان URL الوصف : توجد ثغرة حقن SQL في الإصدار 1 من نظام دعم العملاء. يمكن لمهاجم ضار تنفيذ أوامر SQL على قاعدة بيانات MySQL عن طريق التلاعب بمعامل 'id' في عنوان URL أثناء تعديل عميل. إصدار المنتج المعرض...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root إثبات مفهوم كامل السلسلة لـ CVE-2025-57819. حقن SQL قائم على الأخطاء دون مصادقة في وحدة endpoint في FreePBX يتسلسل إلى شل بصلاحيات الجذر عبر حقن مهام cron وتصعيد الامتيازات عبر incron. للاستخدام في الاختبارات والأبحاث المصرح بها فقط. لا تستخدمه ضد أنظمة ...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Injection SQL non authentifiée Description Le plugin Fancy Product Designer pour WordPress est vulnérable à l'injection SQL dans les versions jusqu'à la 6.4.3 incluse, en raison d'un échappement insuffisant du paramètre fourni par l'utilisateur et...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 PoC fonctionnel pour la vulnérabilité CVE-2024-9796, qui affecte le plugin WP Advanced Search autocompletion sur WordPress, permettant une injection SQL SQL Injection via des paramètres GET non assainis. 📌 Description Cette vulnérabilité permet à un attaquan...

CVE-2026-63030

CVE-2026-63030 Preuve de concept — Injection SQL par confusion de routes dans le lot REST de WordPress CVE-2026-63030 Recherche, développement de l’exploit et documentation parCh4120N ⚠️ Avertissement légal Ce dépôt et l’outil qui l’accompagne exploit.py sont destinés strictement à des fins...

WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Deva Parekh in WordPress Plugin Paid Member Subscriptions versions = 3.1.1...

CVE-2019-9053-port-py3

CVE-2019-9053 Exploit - Python 3 Il s'agit d'un portage en Python 3 de l'exploit CVE-2019-9053, qui cible CMS Made Simple CMSMS dans les versions antérieures à 2.2.10. La vulnérabilité permet une injection SQL via l'interface du module News. Exemple de sortie Testé sur le TryHackMe Simple CTF...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

Important: Red Hat Security Advisory: mariadb-connector-c security update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability مؤلف الاستغلال: ersinerenler الصفحة الرئيسية للمورّد https://code-projects.org/blood-bank-in-php-with-source-code رابط البرنامج https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip نظرة عامة بنك...

CVE-2026-105287

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

EUVD-2026-92386

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-105287

A SQL injection vulnerability exists in feelec-yishu feelcrm-os 1.0.0 within the getMemberByGroups endpoint. The flaw is caused by the manipulation of the groups[] argument in an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php . This vulnerability can be ex...

CVE-2026-105287 feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-105287 feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-42647-Lab

CVE-2026-42647 - حقن SQL أعمى قائم على الوقت بدون مصادقة في JoomSport عبر sortf ملخص تنفيذي يحتوي هذا المستودع على بيئة مختبر Docker محلية لإعادة إنتاج والتحقق من صحة CVE-2026-42647، وهي ثغرة حقن SQL بدون مصادقة تؤثر على إضافة WordPress JoomSport - للرياضات: الفريق والدوري، كرة القدم، الهوكي،...

CVE-2026-105253

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105254

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-104408

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...