CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

EUVD-2026-92419

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277

LibreOffice Calc is vulnerable to Remote Code Execution (RCE) when opening a document that links a cell range to an external data source. An attacker can craft a document naming a Java database driver to be loaded from a remote location, causing the application to execute Java code from that sour...

CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - Vulnerabilidad de Inyección SQL en editcustomer a través del parámetro URL "id" Descripción : Existe una vulnerabilidad de Inyección SQL en la versión 1 del Customer Support System. Un atacante con intenciones maliciosas puede ejecutar comandos SQL en ...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root PoC de cadena completa para CVE-2025-57819. La inyección SQL basada en errores no autenticada en el módulo endpoint de FreePBX encadena hasta una shell root mediante la inyección de trabajos cron y la escalada de privilegios por incron. Solo para pruebas...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Inyección SQL no autenticada Descripción El plugin Fancy Product Designer para WordPress es vulnerable a la inyección SQL en versiones hasta la 6.4.3, incluida, debido a un escape insuficiente del parámetro proporcionado por el usuario y a la falta ...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 PoC funcional para la vulnerabilidad CVE-2024-9796, que afecta al plugin WP Advanced Search autocompletion en WordPress, permitiendo una inyección SQL SQL Injection a través de parámetros GET no sanitizados. 📌 Descripción Esta vulnerabilidad permite a un...

CVE-2026-63030

CVE-2026-63030 Inyección SQL por confusión de rutas en el procesamiento por lotes de la API REST de WordPress CVE-2026-63030 — Prueba de concepto Investigación, desarrollo de exploits y documentación porCh4120N ⚠️ Aviso legal Este repositorio y la herramienta adjunta exploit.py están destinados...

WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Deva Parekh in WordPress Plugin Paid Member Subscriptions versions = 3.1.1...

CVE-2019-9053-port-py3

Exploit CVE-2019-9053 - Python 3 Este es un port a Python 3 del exploit CVE-2019-9053, que afecta a versiones de CMS Made Simple CMSMS anteriores a la 2.2.10. La vulnerabilidad permite inyección SQL a través del módulo News. Salida de ejemplo Probado en el TryHackMe Simple CTF Challenge...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

Important: Red Hat Security Advisory: mariadb-connector-c security update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46014-Vulnerabilidad-de-Inyección-SQL-en-Blood-Bank-1.0-de-Code-Projects Autor del Exploit: ersinerenler Página del Proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del Software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2026-105287

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...