漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-3730 IceBB username参数SQL注入漏洞
SSV-9205 Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability
SSV-9197 ViArt Shop <= 3.5 (category_id) Remote SQL Injection Vulnerability
SSV-3723 Camera Life 'sitemap.xml.php' SQL注入漏洞
SSV-9189 GC Auction Platinum (cate_id) Remote SQL Injection Vulnerability
SSV-9188 Getacoder clone (sb_protype) Remote SQL Injection Vulnerability
SSV-9191 Pligg CMS 9.9.0 (story.php id) Remote SQL Injection Vulnerability
SSV-9190 SiteAdmin CMS (art) Remote SQL Injection Vulnerability
SSV-9192 Youtuber Clone (ugroups.php UID) Remote SQL Injection Vulnerability
SSV-9181 phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln
SSV-9180 fipsCMS light <= 2.1 (r) Remote SQL Injection Vulnerability
SSV-9186 TriO <= 2.1 (browse.php id) Remote SQL Injection Vulnerability
SSV-9185 phpLinkat 0.1 Insecure Cookie Handling / SQL Injection Vulnerability
SSV-9183 Mobius <= 1.4.4.1 (browse.php id) Remote SQL Injection Vulnerability
SSV-9184 EPShop < 3.0 (pid) Remote SQL Injection Vulnerability
SSV-9182 IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit
SSV-9176 FizzMedia 1.51.2 (comment.php mid) SQL Injection Vulnerability
SSV-9177 phpTest 0.6.3 (picture.php image_id) Remote SQL Injection Vulnerability
SSV-9175 Camera Life 2.6.2 (id) Remote SQL Injection Vulnerability
SSV-9173 Live Music Plus 1.1.0 (id) Remote SQL Injection Vulnerability
SSV-3714 EMC Centera Universal Access username参数SQ注入漏洞
SSV-3713 SocialEngine多个SQL注入漏洞
SSV-9170 Atom PhotoBlog 1.1.5b1 (photoId) Remote SQL Injection Vulnerability
SSV-3700 phpKF 'forum_duzen.php' SQL注入漏洞
SSV-3701 PHPFootball 'show.php' SQL注入漏洞
SSV-3709 E-topbiz Shopcart DX 'product_detail.php' SQL注入漏洞
SSV-9163 YouTube Blog 0.1 (RFI/SQL/XSS) Multiple Remote Vulnerabilities
SSV-3710 SocialEngine SQL注入漏洞
SSV-3702 Aprox CMS Engine 'index.php' SQL注入漏洞
SSV-9155 MojoClassifieds 2.0 Remote Blind SQL Injection Exploit
SSV-9156 MojoPersonals (mojoClassified.cgi mojo) Blind SQL Injection Exploit
SSV-9161 Arctic Issue Tracker 2.0.0 (index.php filter) SQL Injection Exploit
SSV-9153 DigiLeave 1.2 (info_book.asp book_id) Blind SQL Injection Exploit
SSV-9154 HRS Multi (picture_pic_bv.asp key) Blind SQL Injection Exploit
SSV-9157 MojoJobs (mojoJobs.cgi mojo) Blind SQL Injection Exploit
SSV-9158 MojoAuto (mojoAuto.cgi mojo) Blind SQL Injection Exploit
SSV-9160 ShopCartDx 4.30 (pid) Remote SQL Injection Vulnerability
SSV-9164 Pre Survey Poll (default.asp catid) SQL Injection Vulnerability
SSV-9148 PHPFootball 1.6 (show.php) Remote SQL Injection Vulnerability
SSV-9147 Siteframe (folder.php id) Remote SQL Injection Vulnerability
SSV-9145 Aprox CMS Engine 5.1.0.4 (index.php page) SQL Injection Vulnerability
SSV-9141 preCMS v.1 (index.php page) Remote SQL injection Vulnerability
SSV-9140 AlstraSoft Article Manager Pro 1.6 Blind SQL Injection Exploit
SSV-9139 AlstraSoft Video Share Enterprise 4.5.1 (UID) SQL Injection Vulnerability
SSV-9136 phpHoo3 <= 5.2.6 (phpHoo3.php viewCat) SQL injection Vulnerability
SSV-9142 Artic Issue Tracker 2.0.0 (index.php filter) SQL Injection Vulnerability
SSV-9124 Oracle Database PL/SQL Statement Multiple SQL Injection Exploits
SSV-9132 Joomla Component DT Register Remote SQL injection Vulnerability
SSV-9133 AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability
SSV-9134 tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities
SSV-3647 Comdev Web Blogger 'arcmonth' SQL注入漏洞
SSV-9102 MySQL 4.0.17 UDF Dynamic Library Exploit
SSV-9107 Galatolo Web Manager 1.3a <= XSS / Remote SQL Injection Vulnerability
SSV-9050 Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability
SSV-9054 HockeySTATS Online 2.0 Multiple Remote SQL Injection Vulnerabilities
SSV-3624 WebCMS Portal Edition 'index.php' SQL注入漏洞
SSV-3625 UltraStats 'players-detail.php' SQL注入漏洞
SSV-3622 mForum 'usercp.php' SQL注入漏洞
SSV-9046 Bilboblog 2.1 Multiple Remote Vulnerabilities
SSV-3623 Avlc Forum 'vlc_forum.php' SQL注入漏洞
SSV-9041 ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities
SSV-9039 Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit
SSV-9026 Joomla Component n-forms 1.01 Blind SQL Injection Exploit
SSV-9027 WebCMS Portal Edition (id) Remote SQL Injection Vulnerability
SSV-9029 jSite 1.0 OE (SQL/LFI) Multiple Remote Vulnerabilities
SSV-9030 Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability
SSV-3598 Dreamlevels Dreampics Builder 'page' SQL注入漏洞
SSV-3600 DreamLevels DreamNews 'dreamnews-rss.php' SQL注入漏洞
SSV-3602 Php168 v2008 SQL注射漏洞
SSV-9014 File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities
SSV-3599 auraCMS 'pages_data.php' SQL注入漏洞
SSV-9017 Million Pixels 3 (id_cat) Remote SQL Injection Vulnerability
SSV-3591 Xerox CentreWare Web SQL注入和跨站脚本漏洞
SSV-3585 Microsoft SQL Server磁盘数据结构整数溢出漏洞（MS08-040）
SSV-9009 Dreampics Builder (page) Remote SQL Injection Vulnerability
SSV-3582 vBulletin adminlog.php请求记录HTML注入漏洞
SSV-17305 DreamNews Manager (id) Remote SQL Injection Vulnerability
SSV-8993 Mole Group Hotel Script 1.0 Remote SQL Injection Vulnerability
SSV-8997 Joomla Component com_content 1.0.0 (ItemID) SQL Injection Vuln
SSV-8998 Mole Group Last Minute Script <= 4.0 Remote SQL Injection Vulnerability
SSV-8992 Last Minute Script <= 4.0 (cid) Remote SQL Injection Vulnerability
SSV-8994 Mole Group Real Estate Script <= 1.1 Remote SQL Injection Vulnerability
SSV-8984 SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Vuln
SSV-8987 Triton CMS Pro (X-Forwarded-For) Blind SQL Injection Exploit
SSV-8989 SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Exploit
SSV-3561 WebBlizzard CMS 'index.php' SQL注入漏洞
SSV-3560 phpwebnews 'bukutamu.php' SQL注入漏洞
SSV-8937 MSSQL 7.0 Remote Denial of Service Exploit
SSV-3543 XChangeboard newThread.php文件SQL注入漏洞
SSV-8917 XPOZE Pro 3.06 (uid) Remote SQL Injection Vulnerability
SSV-8910 Joomla Component altas 1.0 Multiple Remote SQL Injection Exploit
SSV-8905 CMS WebBlizzard (index.php page) Blind SQL Injection Exploit
SSV-8907 phpWebNews 0.2 MySQL Edition (det) SQL Injection Vulnerability
SSV-3541 MySQL udf_init function 信息泄露
SSV-8906 phpWebNews 0.2 MySQL Edition (id_kat) SQL Injection Vulnerability
SSV-3540 显示授权 - MySQL 3.23.31 之前版本
SSV-3538 AShop Deluxe "cat" SQL注入漏洞
SSV-3536 EfesTECH Shop "cat_id" SQL注入漏洞
SSV-3537 plx Ad Trader 'ad.php' SQL注入漏洞
SSV-8900 Joomla Component com_brightweblinks (catid) SQL Injection Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English