漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-4959 Free PHP Petition Signing Script Release Login SQL injection
SSV-10897 Free PHP Petition Signing Script (Auth Bypass) SQL Injection Vuln
SSV-4955 PHPizabi notepad_body参数SQL注入漏洞
SSV-10888 SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability
SSV-4951 Bloginator不安全Cookie和SQL注入漏洞
SSV-10877 SuperNews 1.5 (valor.php noticia) SQL Injection Vulnerability
SSV-4946 ECShop goods_script.php注射漏洞
SSV-10883 Free Arcade Script 1.0 Auth Bypass (SQL) / Upload Shell Vulnerabilities
SSV-10881 Codice CMS 2 Remote SQL Command Execution Exploit
SSV-10878 X-BLC 0.2.0 (get_read.php section) SQL Injection Vulnerability
SSV-10882 Syzygy CMS 0.3 LFI/SQL Command Injection Exploit
SSV-10860 WBB3 rGallery 1.2.3 (UserGallery) Blind SQL Injection Exploit
SSV-10859 Pixie CMS (XSS/SQL) Multiple Remote Vulnerabilities
SSV-4935 PHPRunner SearchField参数SQL注入漏洞
SSV-4941 WordPress fMoblog插件id参数SQL注入漏洞
SSV-4937 DeluxeBB misc.php模块SQL注入漏洞
SSV-10850 Bloginator v1a SQL Command Injection via Cookie Bypass Exploit
SSV-10849 Bloginator v1a (Cookie Bypass/SQL) Multiple Remote Vulnerabilities
SSV-10833 GDL 4.x (node) Remote SQL Injection Vulnerability
SSV-4929 Horde IMP Webmail客户端跨站脚本和HTML注入漏洞
SSV-4928 PostgreSQL转换编码远程拒绝服务漏洞
SSV-4926 OpenCart order参数SQL注入漏洞
SSV-10832 PHPRunner 4.2 (SearchOption) Blind SQL Injection Vulnerability
SSV-10842 DeluxeBB <= 1.3 (qorder) Remote SQL Injection Vulnerability
SSV-10834 Wordpress Plugin fMoblog 2.1 (id) SQL Injection Vulnerability
SSV-10840 Advanced Image Hosting (AIH) 2.3 (gal) Blind SQL Injection Vuln
SSV-10825 Beerwin's PHPLinkAdmin 1.0 RFI/SQL Injection Vulnerabilities
SSV-10824 UBB.threads 5.5.1 (message) Remote SQL Injection Vulnerability
SSV-10826 YAP 1.1.1 Blind SQL Injection/SQL Injection Vulnerabilities
SSV-4915 phpcms2008-0day ask/search_ajax.php注入漏洞
SSV-17881 phpComasy 0.9.1 (entry_id) SQL Injection Vulnerability
SSV-10817 Infopop UBB.Threads Admin Credentials via SQL Injection
SSV-10813 PhpMySport 1.4 (XSS/SQL) Multiple Remote Vulnerabilities
SSV-10815 Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability
SSV-10796 PHPRecipeBook 2.24 (base_id) Remote SQL Injection Vulnerability
SSV-10801 CMS WEBjump! Multiple SQL Injection Vulnerabilities
SSV-10802 PHP-Fusion Mod Book Panel (course_id) SQL Injection Vulnerability
SSV-4883 TinX CMS rss.php模块SQL注入漏洞
SSV-10799 phpCommunity 2.1.8 (SQL/DT/XSS) Multiple Vulnerabilities
SSV-10793 nForum 1.5 Multiple Remote SQL Injection Vulnerabilities
SSV-10797 Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities
SSV-10795 PHP Director <= 0.21 (sql into outfile) eval() Injection Exploit
SSV-10800 PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability
SSV-10798 CS-Cart 2.0.0 Beta 3 (product_id) SQL Injection Vulnerability
SSV-10776 CelerBB 0.0.2 Multiple Remote Vulnerabilities
SSV-17879 OneOrZero Helpdesk <= 1.6.5.7 Local File Inclusion Vulnerability
SSV-17878 isiAJAX v1 (praises.php id) Remote SQL Injection Vulnerability
SSV-17876 Blue Eye CMS <= 1.0.0 Remote Cookie SQL Injection Vulnerability
SSV-10774 Joomla com_ijoomla_archive Blind SQL Injection Exploit
SSV-4871 MySQL ExtractValue()和UpdateXML()函数拒绝服务漏洞
SSV-4862 Drupal Protected Node模块脚本注入漏洞
SSV-10758 Graugon PHP Article Publisher 1.0 (SQL/CH) Multiple Remote Vulns
SSV-17875 Jogjacamp JProfile Gold (id_news) Remote SQL Injection Vulnerability
SSV-10759 Joomla com_digistore (pid) Blind SQL Injection Exploit
SSV-10763 BlindBlog 1.3.1 (SQL/AB/LFI) Multiple Remote Vulnerabilities
SSV-17866 EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities
SSV-4851 远古视频点播系统注入漏洞
SSV-10741 Irokez BLog 0.7.3.2 (XSS/RFI/BSQL) Multiple Remote Vulnerabilities
SSV-10737 BannerManager 0.81 (Auth Bypass) SQL Injection Vulnerability
SSV-10728 pPIM 1.0 Multiple Remote Vulnerabilities
SSV-10729 PenPal 2.0 (Auth Bypass) Remote SQL Injection Vulnerability
SSV-4830 MDPro My_eGallery模块pid参数SQL注入漏洞
SSV-10724 XGuestBook 2.0 (Auth Bypass) SQL Injection Vulnerability
SSV-17863 Netgear WGR614v9 Wireless Router Get Request Denial of Service Vuln
SSV-17864 SkyPortal Picture Manager 0.11 Contents Change Vulnerability
SSV-10725 Qwerty CMS (id) Remote SQL Injection Vulnerability
SSV-10719 taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
SSV-10720 MDPro Module My_eGallery (pid) Remote SQL Injection Exploit
SSV-10705 Graugon Forum v1 (id) SQL Command Injection Exploit
SSV-10655 Oracle 10g MDSYS.SDO_TOPO_DROP_FTBL SQL Injection Exploit (meta)
SSV-10658 动易SiteWeaver6.6注入漏洞Exploit
SSV-4810 GForge多个SQL注入漏洞
SSV-10650 pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability
SSV-17855 SAS Hotel Management System (myhotel_info.asp) SQL Injection Vuln
SSV-17856 YACS CMS 8.11 update_trailer.php Remote File Inclusion Vulnerability
SSV-17858 Grestul 1.x Auth Bypass by Cookie SQL Injection Vulnerability
SSV-17857 RavenNuke 2.3.0 Multiple Remote Vulnerabilities
SSV-10630 IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities
SSV-10634 CmsFaethon 2.2.0 (info.php item) SQL Command Injection Exploit
SSV-10628 ZeroBoard4 pl8 (07.12.17) Multiple Remote/Local Vulnerability
SSV-10624 IPB <=2.0.3 SQL-inj Exploit
SSV-10631 Vlinks 1.1.6 (id) Remote SQL Injection Vulnerability
SSV-10633 BlogWrite 0.91 Remote FD / SQL Injection Exploit
SSV-10619 Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns
SSV-10611 InselPhoto 1.1 (query) Remote SQL Injection Exploit
SSV-4756 ProFTPD mod_sql用户名SQL注入漏洞
SSV-10612 Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit
SSV-4757 mod_auth_mysql软件包多字节字符编码SQL注入漏洞
SSV-10618 Free Joke Script 1.0 Auth Bypass / SQL Injection Vulnerability
SSV-10610 PHP Krazy Image Host Script 1.01 (viewer.php id) SQL Injection Vuln
SSV-10613 Dacio's CMS 1.08 (XSS/SQL/DD) Multiple Remote Vulnerabilities
SSV-10603 ProFTPd with mod_mysql Authentication Bypass Vulnerability
SSV-17850 Den Dating 9.01(searchmatch.php) SQL Injection Vulnerability
SSV-10607 BlueBird Pre-Release (Auth Bypass) SQL Injection Vulnerability
SSV-10608 Fluorine CMS 0.1 rc 1 FD / SQL Injection Command Execution Exploit
SSV-17848 SkaDate Online 7 Remote Shell Upload Vulnerability
SSV-10606 Mynews 0_10 (Auth Bypass) SQL Injection Vulnerability
SSV-10605 AuthPhp 1.0 (Auth Bypass) SQL Injection Vulnerability
SSV-10593 FlexCMS (catId) Remote SQL Injection Vulnerability
SSV-10586 w3bcms <= v3.5.0 Multiple Remote Vulnerabilities Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English