漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-11208 TemaTres 1.0.3 Remote Blind SQL Injection Exploit
SSV-11210 Joomla Almond Classifieds 5.6.2 Blind SQL Injection Vuln
SSV-11195 BluSky CMS (news_id) Remote SQL Injection Vulnerability
SSV-11173 MiniTwitter 0.2b Multiple SQL Injection Vulnerabilities
SSV-11163 Leap CMS 0.1.4 (SQL/XSS/SU) Multiple Remote Vulnerabilities
SSV-11162 Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit
SSV-11124 ProjectCMS 1.0b (index.php sn) Remote SQL Injection Vulnerability
SSV-11123 eLitius 1.0 (banner-details.php id) SQL Injection Vulnerability
SSV-11120 Tiger DMS suffers from a remote SQL injection vulnerability that allows for authentication bypass
SSV-17928 Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit
SSV-11126 Tiger DMS (Auth Bypass) Login.php Remote SQL Injection Vulnerability
SSV-17927 Tiger DMS (Auth Bypass) Remote SQL Injection Vulnerability
SSV-17926 S-Cms 1.1 Stable (page) Local File Inclusion Vulnerability
SSV-11112 ECShop 2.5.0 (order_sn) Remote SQL Injection Vulnerability
SSV-5128 bBlog rss.php远程SQL注入漏洞
SSV-17925 MIM: InfiniX 1.2.003 Multiple SQL Injection Vulnerabilities
SSV-11111 EZ-Blog Beta2 (category) Remote SQL Injection Vulnerability
SSV-5127 BBSGood论坛程序UserInfo.asp页面Blogurl变量过滤不严导致SQL注入漏洞
SSV-5118 AbleSpace多个跨站脚本及SQL注入漏洞
SSV-11096 Photo-Rigma.BiZ v30 (SQL/XSS) Multiple Remote Vulnerabilities
SSV-11097 Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities
SSV-11088 PJblog V3.0 0day Vbs
SSV-5096 PJblog V3.0 注入漏洞
SSV-11085 5 star Rating 1.2 (Auth Bypass) SQL Injection Vulnerability
SSV-17923 Joomla Component rsmonials Remote Cross Site Scxripting Exploit
SSV-11067 Pligg 9.9.0 (editlink.php id) Blind SQL Injection Exploit
SSV-17915 TotalCalendar 2.4 (include) Local File Inclusion Vulnerability
SSV-11074 Creasito e-Commerce 1.3.16 (Auth Bypass) SQL Injection Vuln
SSV-11066 EZ Webitor (Auth Bypass) SQL Injection Vulnerability
SSV-17913 CRE Loaded 6.2 (products_id) SQL Injection Vulnerability
SSV-11072 e107 <= 0.7.15 (extended_user_fields) Blind SQL Injection Exploit
SSV-17918 VS PANEL 7.3.6 (Cat_ID) Remote SQL Injection Vulnerability
SSV-17914 PastelCMS 0.8.0 (LFI/SQL) Multiple Remote Vulnerabilities
SSV-17916 NotFTP 1.3.1 (newlang) Local File Inclusion Vulnerability
SSV-17920 I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability
SSV-17921 Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability
SSV-17922 MixedCMS 1.0b (LFI/SU/AB/FD) Multiple Remote Vulnerabilities
SSV-17911 Dokeos LMS <= 1.8.5 (whoisonline.php) PHP Code Injection Exploit
SSV-17917 Quick.Cms.Lite 0.5 (id) Remote SQL Injection Vulnerability
SSV-11068 WysGui CMS 1.2b (Insecure Cookie Handling) Blind SQL Injection Exploit
SSV-11061 Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities
SSV-11063 Seditio CMS Events Plugin (c) Remote SQL Injection Vulnerability
SSV-11050 ClanTiger <= 1.1.1 (Auth Bypass) SQL Injection Vulnerability
SSV-5066 Geeklog usersettings.php模块SQL注入漏洞
SSV-11047 Tiny Blogr 1.0.0 rc4 (Auth Bypass) SQL Injection Vulnerability
SSV-11052 Online Guestbook Pro (display) Blind SQL Injection Vulnerability
SSV-11054 Hot Project v7 (Auth Bypass) SQL Injection Vulnerability
SSV-11032 Geeklog <= 1.5.2 savepreferences()/*blocks[] SQL Injection Exploit
SSV-11037 cpCommerce 1.2.8 (id_document) Blind SQL Injection Vulnerability
SSV-11041 chCounter 3.1.3 (Login Bypass) SQL Injection Vulnerability
SSV-11033 NetHoteles 2.0/3.0 (Auth Bypass) SQL Injection Vulnerability
SSV-11038 NetHoteles 3.0 (ficha.php) SQL Injection Vulnerability
SSV-17910 ClanTiger <= 1.1.1 (slug) Blind SQL Injection Exploit
SSV-11001 XEngineSoft PMS/MGS/NM/AMS 1.0 (Auth Bypass) SQL Injection Vulns
SSV-17907 RQMS (Rash) <= 1.2.2 Multiple SQL Injection Vulnerabilities
SSV-11003 e107 Plugin userjournals_menu (blog.id) SQL Injection Vulnerability
SSV-17906 Aqua CMS (username) SQL Injection Vulnerability
SSV-11002 FreznoShop 1.3.0 (id) Remote SQL Injection Vulnerability
SSV-10983 Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability
SSV-10977 Geeklog <= 1.5.2 SEC_authenticate() SQL Injection Exploit
SSV-10984 BackendCMS 5.0 (main.asp id) SQL Injection Vulnerability
SSV-10978 Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities
SSV-10981 AdaptBB 1.0b Multiple Remote Vulnerabilities
SSV-10982 WebFileExplorer 3.1 (Auth Bypass) SQL Injection Vulnerability
SSV-10979 Absolute Form Processor XE-V 1.5 (Auth Bypass) SQL Injection Vuln
SSV-10980 My Dealer CMS 2.0 (Auth Bypass) SQL Injection Vulnerability
SSV-5031 Geeklog SEC_authenticate()函数SQL注入漏洞
SSV-5032 glFusion lib-session.php模块SQL注入漏洞
SSV-10972 w3bcms Gaestebuch 3.0.0 Blind SQL Injection Exploit
SSV-10975 Loggix Project 9.4.5 (refer_id) Blind SQL Injection Vulnerability
SSV-17893 Joomla Component MailTo (article) SQL Injection Vulnerability
SSV-17892 Joomla Component Maian Music 1.2.1 (category) SQL Injection Vuln
SSV-17897 WebFileExplorer 3.1 (DB.MDB) Database Disclosure Vulnerability
SSV-17896 Xplode CMS (wrap_script) Remote SQL Injection Vulnerability
SSV-17894 Joomla Component Cmimarketplace (viewit) Directory Traversal Vuln
SSV-17889 Family Connections CMS <= 1.8.2 Blind SQL Injection Vulnerability
SSV-17890 Lanius CMS <= 0.5.2 Remote Arbitrary File Upload Exploit
SSV-10957 FlexCMS Calendar (ItemId) Blind SQL Injection Vulnerability
SSV-10955 Joomla Component com_bookjoomlas 0.1 SQL Injection Vulnerability
SSV-10947 glFusion <= 1.1.2 COM_applyFilter()/cookies Blind SQL Injection Exploit
SSV-10951 AdaptBB 1.0 (topic_id) SQL Injection / Credentials Disclosure Exploit
SSV-10948 form2list (page.php id) Remote SQL Injection Vulnerability
SSV-10950 Gravity Board X 2.0b SQL Injection / Post Auth Code Execution
SSV-10941 MyioSoft Ajax Portal 3.0 (page) SQL Injection Vulnerability
SSV-4967 Yxbbs3.0 20090225版 Usersetup.asp SQL注入
SSV-4966 Yxbbs3.0 注入漏洞
SSV-10932 PHPRecipeBook 2.39 (course_id) Remote SQL Injection Vulnerability
SSV-10928 VirtueMart <= 1.1.2 Remote SQL Injection Exploit (meta)
SSV-10929 VirtueMart <= 1.1.2 Multiple Remote Vulnerabilities
SSV-4970 Xlight FTP Server user参数SQL注入漏洞
SSV-10933 vsp stats processor 0.45 (gamestat.php gameID) SQL Injection Vuln
SSV-10926 Community CMS 0.5 Multiple SQL Injection Vulnerabilities
SSV-10913 BandSite CMS 1.1.4 (members.php memid) SQL Injection Vulnerability
SSV-10914 Gravy Media CMS 1.07 Multiple Remote Vulnerabilities
SSV-10912 Diskos CMS Manager (SQL/DB/Auth Bypass) Multiple Vulnerabilities
SSV-10917 Family Connection 1.8.1 Multiple Remote Vulnerabilities
SSV-10916 JobHut <= 1.2 (pk) Remote SQL Injection Vulnerability
SSV-10905 glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
SSV-10907 iWare CMS 5.0.4 Multiple Remote SQL Injection Vulnerabilities
SSV-10896 Simply Classified 0.2 (category_id) SQL Injection Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English