blind sql injection vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Geek247 Pigmy-sql Geek247 Pigmy-sql 1.4

1 EDB exploit

SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote malicious users to execute arbitrary SQL commands via the Referer HTTP header.

Valarsoft Webmatic 3.1.1

1 EDB exploit

bb_func_unsub.php in MiniBB 3.1 prior to 20141127 uses an incorrect regular expression, which allows remote malicious users to conduct SQl injection attacks via the code parameter in an unsubscribe action to index.php.

1 EDB exploit

SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and previous versions for Apache allows remote malicious users to execute arbitrary SQL commands via a Host header.

Simone Tellini Mod Accounting

1 EDB exploit

SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote malicious users to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.

Joomlahbs Com Tophotelmodule 1.0.0 Joomlahbs Hotel Booking Reservation System 1.0.0

4 EDB exploits

SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote malicious users to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php.

Joomlahbs Hotel Booking Reservation System 1.0.0

4 EDB exploits

SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore prior to 4.7.5 allows remote malicious users to execute arbitrary SQL commands via the email parameter in a recover_login action.

Ktools Photostore

1 EDB exploit

Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) prior to 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) x_16 or (2) x_17 parameter to print.php.

Kerio Control Kerio Control 8.3.0

1 EDB exploit

Multiple SQL injection vulnerabilities in Exponent CMS prior to 2.4.0 allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id ...

Exponentcms Exponent Cms

1 EDB exploit

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submit_info[] parameter in a link submission action....

Php-fusion Php-fusion 6.00.307 Php-fusion Php-fusion 6.01.14

2 EDB exploits

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook