漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-17661 doop CMS <= 1.4.0b (CSRF/Upload Shell) Multiple Remote Vulnerabilities
SSV-10313 CMS NetCat 3.12 (password_recovery.php) Blind SQL Injection Exploit
SSV-17663 Joomla Component Ice Gallery 0.5b2 (catid) Blind SQL Injection Vuln
SSV-10319 Joomla Component com_lowcosthotels (id) Blind SQL Injection Vulnerability
SSV-10304 Joomla Component Volunteer 2.0 (job_id) SQL Injection Vulnerability
SSV-10307 Calendar Script 1.1 (Auth Bypass) SQL Injection Vulnerability
SSV-17660 Joomla Component com_lowcosthotels (id) Blind SQL Injection Vuln
SSV-10308 REDPEACH CMS (zv) Remote SQL Injection Vulnerability
SSV-17658 Pligg 9.9.5b (check_url.php url) Upload Shell/SQL Injection Exploit
SSV-17656 RSS Simple News (news.php pid) Remote SQL Injection Exploit
SSV-10296 Joomla Component com_hbssearch 1.0 Blind SQL Injection Vuln
SSV-10297 Joomla Component com_tophotelmodule 1.0 Blind SQL Injection Vuln
SSV-4575 Courier-Authlib非拉丁字符处理postgres SQL注入漏洞
SSV-17657 Text Lines Rearrange Script (filename) File Disclosure Vulnerability
SSV-10291 Userlocator 3.0 (y) Remote Blind SQL Injection Exploit
SSV-17659 YourPlace <= 1.0.2 Multiple Remote Vulnerabilities + RCE Exploit
SSV-10290 Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities
SSV-10271 Joomla Component Tech Article 1.x (item) SQL Injection Vulnerability
SSV-10268 Microsoft SQL Server sp_replwritetovarbin() Heap Overflow Exploit (0day)
SSV-10272 TinyMCE 2.0.1 (index.php menuID) Remote SQL Injection Vulnerability
SSV-10273 Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit
SSV-10270 r.cms v2 Multiple SQL Injection Vulnerabilities
SSV-10265 Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln
SSV-17654 MyPBS (index.php seasonID) Remote SQL Injection Exploit
SSV-10279 Phpclanwebsite <= 1.23.3 Fix Pack #5 Multiple Remote Vulnerabilities
SSV-10278 I-Rater Basic (messages.php) Remote SQL Injection Vulnerability
SSV-17655 ReVou Twitter Clone Admin Password Changing Exploit
SSV-10280 Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability
SSV-17652 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability
SSV-17651 2532|Gigs 1.2.2 Stable Multiple Remote Vulnerabilities
SSV-17653 2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
SSV-14073 Microsoft SQL Server sp_replwritetovarbin() Heap Overflow Exploit
SSV-10257 ClickAndEmaiL (SQL/XSS) Multiple Remote Vulnerabilities
SSV-17646 Gnews Publisher .NET (authors.asp authorID) SQL Injection Vulnerability
SSV-10259 FaScript FaUpload (download.php) SQL Injection Vulnerability
SSV-17647 Barracuda Spam Firewall v3.5.11.020 Model 600 SQL Injection Vuln
SSV-10258 Click&Rank (SQL/XSS) Multiple Remote Vulnerabilities
SSV-10262 Aiyoota! CMS - Blind SQL Injection Exploit
SSV-17643 Nukedit 4.9.8 Remote Database Disclosure Vulnerability
SSV-10261 FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit
SSV-17641 CFAGCMS v1 (right.php title) SQL Injection Vulnerability
SSV-17636 The Rat Cms Alpha 2 (Auth Bypass) SQL Injection Vulnerability
SSV-17637 XOOPS Module Amevents (print.php id) SQL Injection Vulnerability
SSV-17635 Mediatheka <= 4.2 Remote Blind SQL Injection Exploit
SSV-10250 FLDS 1.2a (redir.php id) Remote SQL Injection Vulnerability
SSV-17640 Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities
SSV-10254 Flatnux html/javascript Injection Cookie Grabber Exploit
SSV-17633 FLDS 1.2a (lpro.php id) Remote SQL Injection Vulnerability
SSV-10256 IsWeb CMS 3.0 (SQL/XSS) Multiple Remote Vulnerabilities
SSV-10255 ASPSiteWare Automotive Dealer V1/V2 SQL Injection Vulnerability
SSV-17642 Click&BaneX Multiple Remote SQL Injection Vulnerabilities
SSV-17638 CadeNix (cid) Remote SQL Injection Vulnerability
SSV-10241 FlexPHPNews 0.0.6 & PRO (Auth Bypass) SQL Injection Vulnerability
SSV-10245 ASP-DEV Internal E-Mail System (Auth Bypass) SQL Injection Vuln
SSV-17624 ASPSiteWare Home Builder 1.0/2.0 SQL Injection Vulnerability
SSV-17621 CodeAvalanche FreeForum (CAForum.mdb) Database Disclosure Vulnerability
SSV-17625 ASPSiteWare RealtyListing V1/V2 SQL Injection Vulnerabilities
SSV-10233 Social Groupie (group_index.php id) Remote SQL Injection Vulnerability
SSV-10232 Xpoze Pro (home menù) <= Blind $ql Injection
SSV-10236 The Net Guys ASPired2Blog (SQL/DD) Multiple Remote Vulnerabilities
SSV-10230 ASP-CMS 1.0 (index.asp cha) SQL Injection Vulnerability
SSV-17615 Xpoze 4.10 (home.html menu) Blind SQL Injection Vulnerability
SSV-17619 ColdFusion Scripts Red_Reservations Database Disclosure Vulnerability
SSV-17620 Joomla Live Chat (SQL/Proxy) Multiple Remote Vulnerabilities
SSV-17618 Umer Inc Songs Portal Script (id) SQL Injection Vulnerability
SSV-10226 Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability
SSV-17609 Feed Cms 1.07.03.19b (lang) Local File Inclusion Vulnerability
SSV-17614 The Net Guys ASPired2Poll Remote Database Disclosure Vulnerability
SSV-17608 eZ Publish 3.9.0/3.9.5/3.10.1 Command Execution Exploit (admin req)
SSV-17612 Banner Exchange Java (Auth Bypass) SQL Injection Vulnerability
SSV-17611 Ad Management Java (Auth Bypass) SQL Injection Vulnerability
SSV-17610 Affiliate Software Java 4.0 (Auth Bypass) SQL Injection Vulnerability
SSV-4558 Microsoft SQL Server sp_replwritetovarbin远程堆溢出漏洞
SSV-17613 PHP Support Tickets 2.2 Remote File Upload Vulnerability
SSV-17607 MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln
SSV-4560 phpMyAdmin table参数SQL注入漏洞
SSV-17605 PhpAddEdit 1.3 (Cookie) Login Bypass Vulnerability
SSV-17606 evCal Events Calendar Database Disclosure Vulnerability
SSV-10223 Webmaster Marketplace (member.php u) SQL Injection Vulnerability
SSV-10227 CF SHOPKART 5.2.2 (SQL/DD) Multiple Remote Vulnerabilities
SSV-17604 CF_Forum Blind SQL Injection Vulnerability
SSV-10215 Netref 4.0 Multiple Remote SQL Injection Vulnerabilities
SSV-10212 Poll Pro 2.0 (Auth Bypass) Remote SQL Injection Vulnerability
SSV-10216 ProQuiz 1.0 (Auth Bypass) SQL Injection Vulnerability
SSV-17603 CFMBLOG (index.cfm categorynbr) Blind SQL Injection Vulnerability
SSV-17601 CF_Calendar (calendarevent.cfm) Remote SQL Injection Exploit
SSV-17602 CF_Auction (forummessage) Blind SQL Injection Vulnerability
SSV-10214 Peel Shopping 3.1 (index.php rubid) SQL Injection Vulnerability
SSV-10205 Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability
SSV-10206 phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
SSV-10202 SIU Guarani Multiple Remote Vulnerabilities
SSV-10203 phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability
SSV-17595 Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln
SSV-17596 PostEcards (SQL/DD) Multiple Remote Vulnerabilities
SSV-10180 Product Sale Framework 0.1b (forum_topic_id) SQL Injection Vulnerability
SSV-10197 RankEm (rankup.asp siteID) Remote SQL Injection Vulnerability
SSV-10185 ASPManage Banners (RFU/DD) Multiple Remote Vulnerabilities
SSV-10190 ASP Talk (SQL/CSS) Multiple Remote Vulnerabilities
SSV-10196 ASP PORTAL Multiple Remote SQL Injection Vulnerabilities
SSV-17586 Multiple Membership Script 2.5 (id) SQL Injection Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English