漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-6703 phpwind 5.0.1 SQL Injection Vulnerability Exploit
SSV-6702 phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit
SSV-6701 Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit
SSV-1680 PostgreSQL SECURITY DEFINER函数本地权限提升漏洞
SSV-1682 EsForum Forum.PHP SQL注入漏洞
SSV-1678 MyBB calendar.php脚本远程SQL注入漏洞
SSV-6683 MyBulletinBoard <= 1.2.5 Remote SQL Injection Exploit
SSV-16992 MyBulletinBoard (MyBB) <= 1.2.5 calendar.php Blind SQL Injection Exploit
SSV-6677 PHP-Ring Webring System 0.9 Remote SQL Injection Vulnerability
SSV-6668 CreaDirectory 1.2 (error.asp id) Remote SQL Injection Vulnerability
SSV-1653 PHP-Nuke绕过SQL注入保护及多个SQL注入漏洞
SSV-1645 PHP-Nuke SQL注入保护绕过和多个SQL注入漏洞
SSV-1621 SmodBIP Index.PHP SQL注入漏洞
SSV-6633 XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit
SSV-6641 Papoo 3.02 (kontakt menuid) Remote SQL Injection Exploit
SSV-6623 QDBlog 0.4 (SQL Injection/LFI) Multiple Remote Vulnerabilities
SSV-1612 XOOPS Rha7 Downloads Module Visit.PHP SQL注入漏洞
SSV-1619 PHP-Generics _App_Relative_Path远程文件包含漏洞
SSV-16990 Papoo <= 3.02 (kontakt menuid) Remote SQL Injection Exploit
SSV-6621 Frogss CMS 0.7 Remote SQL Injection Exploit
SSV-16989 Frogss CMS <= 0.7 Remote SQL Injection Exploit
SSV-16987 e107 0.7.8 (mailout.php) Access Escalation Exploit (admin needed)
SSV-16986 MyBulletinBoard (MyBB) <= 1.2.2 (CLIENT-IP) SQL Injection Exploit
SSV-6603 MyBlog: PHP and MySQL Blog/CMS software RFI Vulnerability
SSV-6599 Battle.net Clan Script for PHP 1.5.1 Remote SQL Injection Vulnerability
SSV-6591 XOOPS Module WF-Links <= 1.03 (cid) Remote SQL Injection Exploit
SSV-6588 XOOPS Module Jobs <= 2.4 (cid) Remote SQL Injection Exploit
SSV-6583 SmodCMS <= 2.10 (Slownik ssid) Remote SQL Injection Exploit
SSV-6584 SmodBIP <= 1.06 (aktualnosci zoom) Remote SQL Injection Exploit
SSV-16966 SmodCMS &lt;= 2.10 (Slownik ssid) Remote SQL Injection Exploit
SSV-16965 SmodBIP &lt;= 1.06 (aktualnosci zoom) Remote SQL Injection Exploit
SSV-16963 XOOPS Module Jobs &lt;= 2.4 (cid) Remote SQL Injection Exploit
SSV-16962 phpMyNewsletter &lt;= 0.8 (beta5) Multiple Vuln Exploit
SSV-16960 Sisplet CMS &lt;= 05.10 (site_path) Remote File Inclusion Vulnerability
SSV-6577 Xoops Module PopnupBlog &lt;= 2.52 (postid) BLIND SQL Injection Exploit
SSV-16959 XOOPS Module Rha7 Downloads 1.0 (visit.php) SQL Injection Exploit
SSV-6579 Xoops Module XFsection &lt;= 1.07 (articleid) BLIND SQL Injection Exploit
SSV-6580 Xoops Module WF-Section &lt;= 1.01 (articleid) SQL Injection Exploit
SSV-16957 XOOPS Module WF-Snippets &lt;= 1.02 (c) BLIND SQL Injection Exploit
SSV-6576 Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
SSV-6581 HP Mercury Quality Center 9.0 build 9.1.0.4352 SQL Execution Exploit
SSV-1595 XOOPS Module Repository ViewCat.PHP SQL注入漏洞
SSV-6570 Oracle 10g DBMS_AQ.ENQUEUE SQL Injection Exploit
SSV-1598 PHP sqlite_udf_decode_binary()函数缓冲区溢出漏洞
SSV-6560 Xoops Module Zmagazine 1.0 (print.php) Remote SQL Injection Exploit
SSV-1588 Hitachi多个产品未明SQL注入漏洞
SSV-1592 Picture-Engine Wall.PHP SQL注入漏洞
SSV-1591 Malaika System MyAds Xoops模块Index.php SQL注入漏洞
SSV-6563 Xoops Module WF-Section <= 1.01 (articleid) SQL Injection Exploit
SSV-6562 Xoops Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit
SSV-6567 PHP-Fusion Module topliste 1.0 (cid) Remote SQL Injection Vulnerability
SSV-6566 PHP-Fusion Module Arcade 1.0 (cid) Remote SQL Injection Vulnerability
SSV-6543 Xoops Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
SSV-6548 Xoops Module Kshop <= 1.17 (id) Remote SQL Injection Exploit
SSV-6549 Xoops Module Tiny Event <= 1.01 (id) Remote SQL Injection Exploit
SSV-6554 Xoops Module Library (viewcat.php) Remote SQL Injection Exploit
SSV-6555 Xoops Module Lykos Reviews 1.00 (index.php) SQL Injection Exploit
SSV-6552 Xoops Module Core (viewcat.php) Remote SQL Injection Exploit
SSV-6558 Xoops Module Repository (viewcat.php) Remote SQL Injection Exploit
SSV-6551 Xoops Module eCal <= 2.24 (display.php) Remote SQL Injection Exploit
SSV-6545 Xoops Module debaser <= 0.92 (genre.php) BLIND SQL Injection Exploit
SSV-6541 Xoops Module RM+Soft Gallery 1.0 BLIND SQL Injection Exploit
SSV-6546 Xoops Module Camportail <= 1.1 (camid) Remote SQL Injection Exploit
SSV-16953 XOOPS Module XFsection &lt;= 1.07 (articleid) BLIND SQL Injection Exploit
SSV-6553 Xoops Module Tutoriais (viewcat.php) Remote SQL Injection Exploit
SSV-6544 Flexphpnews 0.0.5 (news.php newsid) Remote SQL Injection Vulnerability
SSV-16950 XOOPS Module Camportail &lt;= 1.1 (camid) Remote SQL Injection Exploit
SSV-16949 XOOPS Module Kshop &lt;= 1.17 (id) Remote SQL Injection Exploit
SSV-16952 XOOPS Module myAlbum-P &lt;= 2.0 (cid) Remote SQL Injection Exploit
SSV-16951 XOOPS Module debaser &lt;= 0.92 (genre.php) BLIND SQL Injection Exploit
SSV-16947 XOOPS Module eCal &lt;= 2.24 (display.php) Remote SQL Injection Exploit
SSV-16948 XOOPS Module Tiny Event &lt;= 1.01 (id) Remote SQL Injection Exploit
SSV-16946 XOOPS Module Tutoriais (viewcat.php) Remote SQL Injection Exploit
SSV-6528 Xoops Module MyAds Bug Fix <= 2.04jp (index.php) SQL Injection Exploit
SSV-1583 IBM Lotus Domino Web Access EMAIL消息HTML注入漏洞
SSV-1582 Eve-Nuke Forums MySQL.PHP远程文件包含漏洞
SSV-6527 Picture-Engine <= 1.2.0 (wall.php cat) Remote SQL Injection Exploit
SSV-1566 TTCMS EZ_SQL.PHP远程文件包含漏洞
SSV-1575 Joomla! D4JeZine组件index.php SQL注入漏洞
SSV-1567 WebFormatique Car Manager Joomla组件SQL注入漏洞
SSV-6517 Xoops Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit
SSV-16943 XOOPS Module MyAds Bug Fix &lt;= 2.04jp (index.php) SQL Injection Exploit
SSV-1571 FlexBB Start.PHP SQL注入漏洞
SSV-6519 Xoops module Articles <= 1.03 (index.php cat_id) SQL Injection Exploit
SSV-16942 Softerra Time-Assistant &lt;= 6.2 (inc_dir) Remote File Inclusion Vuln
SSV-16944 Picture-Engine &lt;= 1.2.0 (wall.php cat) Remote SQL Injection Exploit
SSV-6499 Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit
SSV-6500 Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit v2
SSV-16940 XOOPS module Articles &lt;= 1.03 (index.php cat_id) SQL Injection Exploit
SSV-1554 ActiveBuyAndSell BuyerSend.ASP SQL注入漏洞
SSV-16941 XOOPS Module Friendfinder &lt;= 3.3 (view.php id) SQL Injection Exploit
SSV-6494 Joomla Component D4JeZine <= 2.8 Remote BLIND SQL Injection Exploit
SSV-6493 PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability
SSV-6495 Xoops module Articles <= 1.02 (print.php id) SQL Injection Exploit
SSV-16939 Joomla Component D4JeZine &lt;= 2.8 Remote BLIND SQL Injection Exploit
SSV-16938 XOOPS module Articles &lt;= 1.02 (print.php id) SQL Injection Exploit
SSV-1550 DVBBS &lt;= 7.1.0 sp1 (BokeManage.asp) Remote SQL Injection
SSV-6474 Joomla Component Car Manager <= 1.1 Remote SQL Injection Exploit
SSV-6475 ttCMS <= v4 (ez_sql.php lib_path) Remote File Inclusion Vulnerability
SSV-6473 Joomla Component RWCards <= 2.4.3 Remote SQL Injection Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English