mssqli-duet

MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...

wp2shell-poc

Come funziona tutto questo In cosa questo PoC differisce dagli exploit wp2shell pubblici Tutti i PoC sfruttano gli stessi due bug - la confusione di route REST batch CVE-2026-63030 e l'iniezione SQL authornotin CVE-2026-60137 - con la stessa forma di batch doppiamente annidato. Ciò che differisce...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL-Injection-Schwachstelle im Online-Eventbuchungs- und Reservierungssystem Version 2.3.0. Technische Beschreibung: Eine SQL-Injection-Schwachstelle existiert in der Eventmanagement-Software Version 2.3.0. Ein Angreifer kann den anfälligen Parameter „id“ auf der...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

CVE-2023-23279

SQL injection nel Canteen Management System v1.0. Autore del bug: Tuannq Data di scoperta: 5/1/2023 Fornitore: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Account di accesso: [email protected]/rootadmin account Super Admin File vulnerabile:...

CVE-2024-1512

CVE-2024-1512 Konzeptnachweis Schwachstellenübersicht CVE-2024-1512 legt eine kritische Schwachstelle im MasterStudy LMS WordPress Plugin offen, speziell innerhalb der Implementierung der REST-Route /lms/stm-lms/order/items. Das Problem entsteht dadurch, dass das Plugin den Parameter 'user' nicht...

CVE-2021-45041

CVE-2021-45041 PoC per CVE-2021-45041 aka SCRMBT-177 - SQL-Injection autenticata in SuiteCRM = 8.0.0. Default: False --help Mostra questo messaggio e termina. https://github.com/manuelz120/CVE-2021-45041 Esempio di utilizzo: root@kitploit: .venv ➜ CVE-2021-45041 git:main ✗ ./exploit.py --host...

CVE-2021-44593

CVE-2021-44593 Divulgazione pubblica di CVE-2021-44593. Una vulnerabilità di SQL injection/caricamento arbitrario di file/esecuzione di codice remoto in Simple College Website. DESCRIZIONE Simple College Website 1.0 è vulnerabile a una SQL injection non autenticata basata su UNION nel parametro...

CVE-2022-42098

KLiK-SocialMediaWebsite versione v1.0.1 Spiegazione della vulnerabilità: KLiK-SocialMediaWebsite v1.0.1 presenta vulnerabilità di SQL Injection su profile.php nel parametro id. Vettori d'attacco: KLiK-SocialMediaWebsite v1.0.1 Una volta creato un utente, è possibile trovare persone su KLiK tramit...

Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...

GHSA-W27M-RMMF-G5W4 Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...

EUVD-2022-56016

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

VulnCheck KEV: CVE-2022-50997

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2026-71237

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from 'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='' and password='' limit 1". An unauthenticated attacker can submit a payload...

CVE-2026-71237 Miantang IoT-PHP - Unauthenticated SQL Injection in /userlogin

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from 'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='' and password='' limit 1". An unauthenticated attacker can submit a payload...

EUVD-2026-44595

The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes...

CVE-2026-40523

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SAGLANALYTIC permission to execute arbitrary SQL queries by injecting malicious code into the PARAM2 and PARAM3 POST parameters. Attackers can exploit...

CVE-2026-40523 FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SAGLANALYTIC permission to execute arbitrary SQL queries by injecting malicious code into the PARAM2 and PARAM3 POST parameters. Attackers can exploit...

CVE-2026-40523

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SAGLANALYTIC permission to execute arbitrary SQL queries by injecting malicious code into the PARAM2 and PARAM3 POST parameters. Attackers can exploit...