Exploit for SQL Injection in Glpi-Project Glpi

CVE-2022-31061 PoC for GLPI CVE-2022-31061 A Proof of Concept...

CVE-2022-34955

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

CVE-2022-34955

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

CVE-2022-34956

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

Sql injection

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

Sql injection

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

CVE-2022-34956

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

CVE-2022-34956

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

CVE-2022-34956

Pligg CMS v2.0.2 is affected by a time-based SQL injection via the page_size parameter in load_data_for_groups.php (CVE-2022-34956). The vulnerability allows an attacker to manipulate SQL queries, with the NVD listing a 9.8 (CRITICAL) base score across confidentiality, integrity, and availability...

CVE-2022-34955

CVE-2022-34955 : Pligg CMS v2.0.2 contains a time-based SQL injection vulnerability exposed via the page_size parameter in load_data_for_topusers.php. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CVE lists) with a common description and an NVD CVSS v3.1 base score of 9.8 (CRI...

CVE-2022-34956: Improper Neutralization of Special Elements used in an SQL Command

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

CVE-2022-34955: Improper Neutralization of Special Elements used in an SQL Command

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

PT-2022-22455 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A time-based SQL injection issue was found in Pligg CMS. The issue is related to the page size parameter at the "load data for groups.php" endpoint. Recommendations: For Pligg CMS version 2.0.2, avoid usin...

Translatepress Multilinugal < 2.3.3 - Admin+ SQLi

The plugin is vulnerable to an authenticated SQL injection. By adding a new language via the settings page containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected. PoC To exploit the vulnerability, someone must send a...

Orange Station 1.0 SQL Injection

Title: Orange Station 1.0 SQLi Author: nu11secur1ty Date: 0.16.2022 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html Reference:...

U.S. Dept Of Defense: time based SQL injection at [https://███] [HtUS]

Hello, Summary while doing test on www.█████ I’ve found that the endpoint at /olc/setlogin.php is vulnerable with SQL injection vulnerability Vulnerable parameters - username - password POC - using time based to verify , submit the below request jsx POST /olc/setlogin.php HTTP/1.1 Host: www.█████...

[SECURITY] Fedora 36 Update: golang-github-fernet-0-0.9.20200726giteff2850.fc36

Fernet takes a user-provided message an arbitrary sequence of bytes, a key 256 bits, and the current time, and produces a token, which contains the message in a form that can't be read or altered without the key...

CVE-2017-20104: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

Coffee Shop Cashiering System 1.0 SQL Injection

Exploit Title: Coffee Shop Cashiering System - Authenticated Time Based Sql injection Date: 27-06-2022 Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/cscs.zip Version: 1.0 Tested on: Windows...

Coffee Shop Cashiering System 1.0 SQL Injection Exploit

Exploit Title: Coffee Shop Cashiering System - Authenticated Time Based Sql injection Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/cscs.zip Version: 1.0 Tested on: Windows 10 + XAMPP 3.2.4...