漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-5457 T.G.S. CMS <= 0.1.7 (logout.php) Remote SQL Injection Exploit
SSV-5447 Techno Dreams Guestbook 1.0 (key) Remote SQL Injection Vulnerability
SSV-5448 Techno Dreams Announcement (key) Remote SQL Injection Vulnerability
SSV-5444 E Annu 1.0 Login Bypass SQL Injection Exploit
SSV-5439 Discuz! 5.0.0 RC1 SQL injection PoC
SSV-5430 PHP My Ring <= 4.2.1 (cherche.php) Remote SQL Injection Vulnerability
SSV-5433 PHPEasyData Pro 2.2.2 (index.php) Remote SQL Injection Exploit
SSV-5416 Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability
SSV-315 动力(My Power)3.51版Article_Print.asp注射漏洞
SSV-323 动网(DVBBS)tongji.asp文件未过滤注入漏洞
SSV-16741 PHPMyRing <= 4.2.1 (cherche.php) Remote SQL Injection Vulnerability
SSV-317 动网论坛DVBBS) logout.asp页面存在注入漏洞
SSV-5415 Php League 0.82 (classement.php) Remote SQL Injection Exploit
SSV-309 Microsoft FrontPage Server Extensions跨站脚本漏洞（MS06-017)
SSV-179 PHP Classifieds catid_search及catid变量远程SQL注入漏洞
SSV-5263 Discuz! 5 SQL injection Exploit
SSV-165 PostgreSQL多个本地拒绝服务漏洞
SSV-161 动易NewComment.asp注入漏洞
SSV-99 PHP-Nuke SQL注入及绕过SQL注入防护漏洞
SSV-68 ezContents多个SQL注入、远程/本地文件包含和跨站脚本漏洞
SSV-16732 Discuz! 5.0.0 GBK SQL Injection / Admin Credentials Disclosure Exploit
SSV-16733 ArticleBeach Script <= 2.0 (index.php) Remote File Inclusion Vulnerability
SSV-5254 Berty Forum <= 1.4 (index.php) Remote Blind SQL Injection Exploit
SSV-84 TR Forum SQL注入及认证绕过漏洞
SSV-156 Invision Power Board index.php st参数远程SQL注入漏洞
SSV-5213 ProFTPD 1.2.9RC1 (mod_sql) Remote SQL Injection Exploit
SSV-16722 PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
SSV-16710 WGCC <= 0.5.6b (quiz.php) Remote SQL Injection Vulnerability
SSV-16690 WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
SSV-16685 Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit
SSV-16681 webSPELL <= 4.01.01 (getsquad) Remote SQL Injection Exploit
SSV-16680 Def-Blog <= 1.0.3 (comadd.php) Remote SQL Injection Vulnerability
SSV-16644 Invision Gallery <= 2.0.7 ReadFile() & SQL Injection Exploit (linux)
SSV-16608 4images 1.7.x (search.php) Remote SQL Injection Exploit
SSV-16607 phpBB Random User Registration Number 1.0 Mod Inclusion Vulnerability
SSV-16606 Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit
SSV-16601 PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability
SSV-16595 Invision Gallery <= 2.0.7 ReadFile() & SQL Injection Exploit
SSV-16581 PHP Krazy Image Hosting 0.7a (display.php) SQL Injection Exploit
SSV-16582 UBB.threads <= 6.5.1.1 (doeditconfig.php) Code Execution Exploit
SSV-16551 Spidey Blog Script <= 1.5 (tr) Remote SQL Injection Exploit
SSV-16553 iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
SSV-16547 Eskolar CMS 0.9.0.0 (index.php) Remote SQL Injection Exploit
SSV-16546 xweblog <= 2.1 (kategori.asp) Remote SQL Injection Vulnerability
SSV-16548 e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit
SSV-16538 exV2 <= 2.0.4.3 (sort) Remote SQL Injection Exploit
SSV-16528 more.groupware <= 0.74 (new_calendarid) Remote SQL Injection Exploit
SSV-16531 MyReview 1.9.4 (email) Remote SQL Injection / Code Execution Exploit
SSV-16529 Tekman Portal 1.0 (tr) Remote SQL Injection Vulnerability
SSV-16523 AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit
SSV-16522 CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln
SSV-16519 Techno Dreams FAQ Manager 1.0 Remote SQL Injection Vulnerability
SSV-16521 Charon Cart v3 (Review.asp) Remote SQL Injection Vulnerability
SSV-16516 Zix Forum <= 1.12 (RepId) Remote SQL Injection Exploit
SSV-16518 Q-Shop 3.5 (browse.asp) Remote SQL Injection Vulnerability
SSV-16520 Techno Dreams Articles & Papers 2.0 Remote SQL Injection Vulnerability
SSV-16510 phpQuiz <= 0.1.2 Remote SQL Injection / Code Execution Exploit
SSV-16512 GNUTURK <= 2G (t_id) Remote SQL Injection Exploit
SSV-16505 Haberx 1.02 <= 1.1 (tr) Remote SQL Injection Vulnerability
SSV-16496 TualBLOG 1.0 (icerikno) Remote SQL Injection Vulnerability
SSV-16476 Vivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability
SSV-16450 ACGV News <= 0.9.1 (PathNews) Remote File Inclusion Vulnerability
SSV-16451 C-News <= 1.0.1 (path) Remote File Inclusion Vulnerability
SSV-16449 Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability
SSV-16440 Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit
SSV-16439 SimpleBlog &lt;= 2.3 (id) Remote SQL Injection Vulnerability
SSV-16437 Muratsoft Haber Portal 3.6 (tr) Remote SQL Injection Vulnerability
SSV-16431 TikiWiki &lt;= 1.9 Sirius (jhot.php) Remote Command Execution Exploit
SSV-16432 Annuaire 1Two 2.2 Remote SQL Injection Exploit
SSV-16430 icblogger v2 (YID) Remote SQL Injection Vulnerability
SSV-16417 Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities
SSV-16414 CMS Frogss &lt;= 0.4 (podpis) Remote SQL Injection Exploit
SSV-16411 proManager &lt;= 0.73 (note.php) Remote SQL Injection Vulnerability
SSV-16401 phpBB All Topics Mod &lt;= 1.5.0 (start) Remote SQL Injection Exploit
SSV-16400 MercuryBoard &lt;= 1.1.4 (User-Agent) Remote SQL Injection Exploit
SSV-16388 SimpleBlog &lt;= 2.0 (comments.asp) Remote SQL Injection Exploit
SSV-16384 SimpleBlog &lt;= 2.0 (comments.asp) Remote SQL Injection Vulnerability
SSV-16386 LBlog &lt;= 1.05 (comments.asp) Remote SQL Injection Vulnerability
SSV-16387 Simple Machines Forum &lt;= 1.1 rc2 (lngfile) Remote Exploit (windows)
SSV-4232 WebspotBlogging login.php远程SQL注入漏洞
SSV-4219 Oracle SYS.DBMS_METADATA_UTIL软件包SQL注入漏洞
SSV-16355 PHPMyRing &lt;= 4.2.0 (view_com.php) Remote SQL Injection Exploit
SSV-16354 PocketPC MMS Composer (WAPPush) Denial of Service Exploit
SSV-16339 Mac OS X &lt;= 10.4.7 fetchmail Privilege Escalation Exploit (x86)
SSV-16341 Mac OS X &lt;= 10.4.7 fetchmail Privilege Escalation Exploit
SSV-16340 Mac OS X &lt;= 10.4.7 fetchmail Privilege Escalation Exploit (ppc)
SSV-16338 XMB &lt;= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)
SSV-16326 Joomla com_bayesiannaivefilter Component &lt;= 1.1 Inclusion Vulnerability
SSV-16324 ATutor &lt;= 1.5.3.1 (links) Remote Blind SQL Injection Exploit
SSV-16325 Mambo User Home Pages Component &lt;= 0.5 Remote Include Vulnerability
SSV-16312 Etomite CMS &lt;= 0.6.1 (username) SQL Injection Exploit (mq = off)
SSV-16310 X7 Chat &lt;= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
SSV-16311 PrinceClan Chess Mambo Com &lt;= 0.8 Remote Inclusion Vulnerability
SSV-16298 LoudBlog &lt;= 0.5 (id) SQL Injection / Admin Credentials Disclosure
SSV-16292 toendaCMS &lt;= 1.0.0 (FCKeditor) Remote File Upload Exploit
SSV-16290 Invision Power Board 2.1 &lt;= 2.1.6 Remote SQL Injection Exploit (2)
SSV-16291 BT Voyager 2091 (Wireless ADSL) Multiple Vulnerabilities
SSV-16289 Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit
SSV-16293 PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
SSV-16270 MyBulletinBoard (MyBB) &lt;= 1.1.5 (CLIENT-IP) SQL Injection Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English