漏洞分类 - SQL 注入 - SQL injection - 知道创宇 Seebug 漏洞平台

漏洞分类 — SQL 注入

英文名字: SQL injection

漏洞详情：: SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID	提交时间	漏洞等级	漏洞名称	漏洞状态	人气 \| 评论
SSV-16862	2007-02-20		PHP-Nuke <= 8.0 Final (INSERT) Remote SQL Injection Exploit		1294 \| 0
SSV-16858	2007-02-19		PHP-Nuke Module Emporium <= 2.3.0 Remote SQL Injection Exploit		1219 \| 0
SSV-6212	2007-02-19		webSPELL 4.01.02 (showonly) Remote Blind SQL Injection Exploit		1635 \| 0
SSV-6207	2007-02-19		XLAtunes 0.1 (album) Remote SQL Injection Vulnerability		699 \| 0
SSV-6208	2007-02-19		Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability		706 \| 0
SSV-6202	2007-02-16		Aktueldownload Haber scripti (id) Remote SQL Injection Vulnerability		704 \| 0
SSV-6204	2007-02-16		Jupiter CMS 1.1.5 (Client-IP) Remote SQL Injection Exploit		838 \| 0
SSV-6201	2007-02-16		CodeAvalanche News 1.x (CAT_ID) Remote SQL Injection Vulnerability		766 \| 0
SSV-16851	2007-02-15		Drupal < 5.1 (post comments) Remote Command Execution Exploit v2		1421 \| 0
SSV-16852	2007-02-15		Drupal < 4.7.6 (post comments) Remote Command Execution Exploit v2		1472 \| 0
SSV-6185	2007-02-14		Xaran Cms <= 2.0 (xarancms_haupt.php) SQL Injection Exploit		827 \| 0
SSV-6188	2007-02-14		PollMentor 2.0 (pollmentorres.asp id) SQL Injection Vulnerability		688 \| 0
SSV-16845	2007-02-13		phpCC <= 4.2 beta (nickpage.php npid) Remote SQL Injection Exploit		783 \| 0
SSV-16844	2007-02-13		Xaran Cms <= 2.0 (xarancms_haupt.php) SQL Injection Exploit		692 \| 0
SSV-6181	2007-02-13		Philboard <= 1.14 (philboard_forum.asp) SQL Injection Vulnerability		830 \| 0
SSV-1405	2007-02-11		Kisisel Site 2007 SQL注入漏洞		548 \| 0
SSV-1401	2007-02-11		Woltlab Burning Board Lite Pms.PHP SQL注入漏洞		1451 \| 0
SSV-1400	2007-02-11		MySQLNewsEngine Affichearticles.PHP3远程文件包含漏洞		1493 \| 0
SSV-6169	2007-02-09		LushiNews <= 1.01 (comments.php) Remote SQL Injection Exploit		737 \| 0
SSV-6168	2007-02-09		LightRO CMS 1.0 (index.php projectid) Remote SQL Injection Exploit		771 \| 0
SSV-1388	2007-02-09		Curium CMS News.PHP SQL注入漏洞		514 \| 0
SSV-6170	2007-02-09		LushiWarPlaner 1.0 (register.php) Remote SQL Injection Exploit		718 \| 0
SSV-1394	2007-02-09		dxbbs SQL注入漏洞		523 \| 0
SSV-6163	2007-02-08		OTSCMS <= 2.1.5 (SQL/XSS) Multiple Remote Vulnerabilities		712 \| 0
SSV-6144	2007-02-07		MySQL 4.x/5.0 User-Defined Function Command Execution Exploit (win)		1614 \| 0
SSV-6143	2007-02-07		Kisisel Site 2007 (tr) Remote SQL Injection Vulnerability		722 \| 0
SSV-1367	2007-02-07		PostgreSQL信息泄露及拒绝服务漏洞		1188 \| 0
SSV-6138	2007-02-05		Oracle 9i/10g DBMS_EXPORT_EXTENSION SQL Injection Exploit		1454 \| 0
SSV-6130	2007-02-04		Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit		1668 \| 0
SSV-6128	2007-02-04		Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability		679 \| 0
SSV-6120	2007-02-03		dB Masters Curium CMS <= 1.03 (c_id) Remote SQL Injection Vulnerability		701 \| 0
SSV-1352	2007-02-03		ASPSide.Com TForum User_Confirm.ASP SQL注入漏洞		468 \| 0
SSV-6105	2007-02-02		Hunkaray Duyuru Scripti (tr) Remote SQL Injection Exploit		674 \| 0
SSV-1326	2007-02-01		CascadianFaq Index.PHP SQL注入漏洞		558 \| 0
SSV-1324	2007-02-01		Yahoo! Messenger通知消息HTML注入漏洞		519 \| 0
SSV-6097	2007-02-01		Fullaspsite Asp Hosting Sitesi (tr) SQL Injection Vulnerability		716 \| 0
SSV-6096	2007-02-01		Michelles L2J Dropcalc <= v4 Remote SQL Injection Vulnerability		711 \| 0
SSV-6098	2007-02-01		ExoPHPDesk <= 1.2.1 (faq.php) Remote SQL Injection Vulnerability		814 \| 0
SSV-1341	2007-02-01		MDPro Index.PHP注入漏洞		526 \| 0
SSV-1330	2007-02-01		SpoonLabs Vivvo Article Management CMS Show_Webfeed.PHP SQL注入漏洞		632 \| 0
SSV-6091	2007-01-31		CascadianFAQ <= 4.1 (index.php) Remote SQL Injection Vulnerability		694 \| 0
SSV-6082	2007-01-29		xNews 1.3 (xNews.php) Remote SQL Injection Vulnerability		681 \| 0
SSV-1311	2007-01-28		WebSpell Gallery.PHP SQL注入漏洞		1234 \| 0
SSV-6071	2007-01-28		chernobiLe Portal 1.0 (default.asp) Remote SQL Injection Vulnerability		792 \| 0
SSV-1303	2007-01-28		Makit Newsposter Script News_Page.ASP SQL注入漏洞		514 \| 0
SSV-1298	2007-01-27		Drupal Acidfree模块节点标题SQL注入漏洞		1177 \| 0
SSV-1294	2007-01-27		ASP Edge User.ASP SQL注入漏洞		679 \| 0
SSV-1299	2007-01-27		GPS CMS Print.ASP SQL注入漏洞		551 \| 0
SSV-1295	2007-01-27		ASP News News_Detail.ASP SQL注入漏洞		501 \| 0
SSV-6065	2007-01-26		makit Newsposter Script v3 Remote SQL Injection Vulnerability		779 \| 0
SSV-6063	2007-01-26		Forum Livre 1.0 (SQL Injection / XSS) Multiple Remote Vulnerabilities		780 \| 0
SSV-6067	2007-01-26		GPS CMS 1.2 (print.asp) Remote SQL Injection Vulnerability		748 \| 0
SSV-16838	2007-01-25		Aztek Forum 4.0 Multiple Vulnerabilities Exploit		1008 \| 0
SSV-6056	2007-01-25		ASP NEWS <= v3 (news_detail.asp) Remote SQL Injection Vulnerability		757 \| 0
SSV-6058	2007-01-25		RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability		779 \| 0
SSV-6057	2007-01-25		ASP EDGE <= 1.2b (user.asp) Remote SQL Injection Vulnerability		884 \| 0
SSV-6049	2007-01-24		Oracle 10g SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL/SQL Injection		932 \| 0
SSV-6048	2007-01-24		Oracle 10g SYS.KUPW$WORKER.MAIN PL/SQL Injection Exploit		1217 \| 0
SSV-6047	2007-01-24		Oracle 10g SYS.KUPV$FT.ATTACH_JOB PL/SQL Injection Exploit		1076 \| 0
SSV-1280	2007-01-24		Vote!Pro eval()调用代码注入漏洞		560 \| 0
SSV-1267	2007-01-22		PHP-Nuke SQL注入漏洞		1138 \| 0
SSV-6041	2007-01-22		webSPELL 4.01.02 (gallery.php) Remote Blind SQL Injection Exploit		1638 \| 0
SSV-1263	2007-01-22		Joomla CMS多个SQL注入漏洞		971 \| 0
SSV-1264	2007-01-22		Letterman ID参数SQL注入漏洞		639 \| 0
SSV-16835	2007-01-21		Upload Service 1.0 (top.php maindir) Remote File Inclusion Vulnerability		776 \| 0
SSV-6026	2007-01-19		phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit		751 \| 0
SSV-6023	2007-01-18		Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit		1160 \| 0
SSV-1243	2007-01-18		Okul Web Otomasyon Sistemi Etkinlikbak.ASP SQL注入漏洞		740 \| 0
SSV-6022	2007-01-18		Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 2		1290 \| 0
SSV-1255	2007-01-18		Woltlab Burning Board Search.PHP SQL注入漏洞		1142 \| 0
SSV-6020	2007-01-18		Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3		1278 \| 0
SSV-6014	2007-01-18		MGB 0.5.4.5 (email.php id variable) Remote SQL Injection Exploit		754 \| 0
SSV-1250	2007-01-18		Scriptme SmE File Mailer Login SQL注入漏洞		532 \| 0
SSV-1252	2007-01-18		MGB Email.PHP SQL注入漏洞		634 \| 0
SSV-16829	2007-01-17		Woltlab Burning Board <= 1.0.2 2.3.6 search.php SQL Injection Exploit 3		743 \| 0
SSV-1221	2007-01-17		PHP-Nuke Block-Old_Articles.PHP SQL注入漏洞		1101 \| 0
SSV-16828	2007-01-17		Woltlab Burning Board <= 1.0.2 2.3.6 search.php SQL Injection Exploit 2		788 \| 0
SSV-1205	2007-01-17		All In One Control Panel SQL注入漏洞		840 \| 0
SSV-1219	2007-01-17		DigiAppz DigiAffiliate Visu_User.ASP SQL注入漏洞		624 \| 0
SSV-16827	2007-01-17		Woltlab Burning Board <= 1.0.2 2.3.6 search.php SQL Injection Exploit		780 \| 0
SSV-1194	2007-01-16		PWSPHP Profil.PHP SQL Injection Vulnerability		545 \| 0
SSV-6007	2007-01-16		Okul Web Otomasyon Sistemi 4.0.1 Remote SQL Injection Vulnerability		744 \| 0
SSV-6003	2007-01-15		ThWboard <= 3.0b2.84-php5 SQL Injection / Code Execution Exploit		864 \| 0
SSV-1188	2007-01-14		PHPKit Comment.PHP SQL注入漏洞		647 \| 0
SSV-1186	2007-01-14		PHPMyFAQ SQL注入漏洞		1171 \| 0
SSV-5994	2007-01-14		DigiAffiliate <= 1.4 (visu_user.asp id) Remote SQL Injection Exploit		913 \| 0
SSV-5986	2007-01-13		VP-ASP Shopping Cart 6.09 (SQL/XSS) Multiple Remote Vulnerabilities		782 \| 0
SSV-5989	2007-01-13		Mint Haber Sistemi 2.7 (duyuru.asp id) Remote SQL Injection Vulnerability		790 \| 0
SSV-5984	2007-01-11		Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit		1291 \| 0
SSV-5975	2007-01-10		MOTIONBORG Web Real Estate <= 2.1 SQL Injection Vulnerability		807 \| 0
SSV-16824	2007-01-09		uniForum <= v4 (wbsearch.aspx) Remote SQL Injection Vulnerability		792 \| 0
SSV-1139	2007-01-09		iGeneric iG Calendar USER.PHP SQL注入漏洞		657 \| 0
SSV-1138	2007-01-09		IGeneric IG Shop SQL注入漏洞		760 \| 0
SSV-1133	2007-01-09		Coppermine Photo Gallery Albmgr.PHP注入漏洞		1251 \| 0
SSV-1134	2007-01-09		DigiAppz DigiRez Info_Book.ASP SQL注入漏洞		522 \| 0
SSV-1148	2007-01-09		WordPress Charset解码SQL注入漏洞		871 \| 0
SSV-1146	2007-01-09		Shopstorenow E-commerce Shopping Cart Orange.ASP SQL注入漏洞		822 \| 0
SSV-1140	2007-01-09		Kolayindir Download Down.ASP SQL注入漏洞		655 \| 0
SSV-5969	2007-01-08		Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit		1243 \| 0
SSV-5960	2007-01-06		Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit		1366 \| 0

1
...
58
59
60
61
62
63
64
65
66
67
68
...
69