漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-16268 Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit
SSV-16266 Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit
SSV-16267 CzarNews <= 1.14 (tpath) Remote File Inclusion Vulnerability
SSV-16265 phpBB 3 (memberlist.php) Remote SQL Injection Exploit
SSV-16255 com_forum Mambo Component <= 1.2.4RC3 Remote Include Vulnerability
SSV-16254 SimpleBoard Mambo Component <= 1.1.0 Remote Include Vulnerability
SSV-16253 PAPOO <= 3_RC3 SQL Injection/Admin Credentials Disclosure Exploit
SSV-16244 BXCP <= 0.3.0.4 (where) Remote SQL Injection Exploit
SSV-16237 deV!Lz Clanportal [DZCP] <= 1.34 (id) Remote SQL Injection Exploit
SSV-16234 Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
SSV-16232 BLOG:CMS <= 4.0.0k Remote SQL Injection Exploit
SSV-16233 XOOPS myAds Module (lid) Remote SQL Injection Vulnerability
SSV-16230 Scout Portal Toolkit <= 1.4.0 (forumid) Remote SQL Injection Exploit
SSV-16220 BitchX <= 1.1-final do_hook() Remote Denial of Service Exploit
SSV-16219 Jaws <= 0.6.2 (Search gadget) Remote SQL Injection Exploit
SSV-16216 Ralf Image Gallery <= 0.7.4 Multiple Remote Vulnerabilities
SSV-16215 Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)
SSV-16213 DataLife Engine <= 4.1 Remote SQL Injection Exploit (perl)
SSV-16214 DataLife Engine <= 4.1 Remote SQL Injection Exploit (php)
SSV-16208 Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit
SSV-16207 ASP Stats Generator <= 2.1.1 SQL Injection Vulnerabilities
SSV-16206 WeBBoA Host Script 1.1 Remote SQL Injection Vulnerability
SSV-16200 Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit
SSV-16198 Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit
SSV-16187 blur6ex <= 0.3.462 (ID) Admin Disclosure / Blind SQL Injection Exploit
SSV-16184 RCblog <= 1.03 (post) Remote Command Execution Exploit
SSV-16183 MaxiSepet <= 1.0 (link) SQL Injection Vulnerability
SSV-16163 Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
SSV-16160 FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit
SSV-16159 LifeType <= 1.0.4 SQL Injection / Admin Credentials Disclosure Exploit
SSV-16158 ProPublish 2.0 (catid) Remote SQL Injection Vulnerability
SSV-16145 aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
SSV-16137 Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit
SSV-16135 Fastpublish CMS 1.6.9 config[fsBase] Remote Include Vulnerabilities
SSV-16136 Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit
SSV-16129 Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit
SSV-16131 Activity MOD Plus <= 1.1.0 (phpBB Mod) File Inclusion Vulnerability
SSV-16134 CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
SSV-16133 Blend Portal <= 1.2.0 (phpBB Mod) Remote File Inclusion Vulnerability
SSV-16126 tinyBB <= 0.3 Remote (Include / SQL Injection) Vulnerabilities
SSV-16127 Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities
SSV-16130 UBB Threads 5.x / 6.x Multiple Remote File Inclusion Vulnerabilities
SSV-16132 ASPSitem <= 2.0 Remote (SQL Injection / DB Disclosure) Vulnerabilities
SSV-16124 PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
SSV-16125 MiniNuke 2.x (create an admin) Remote SQL Injection Exploit
SSV-16121 qjForum (member.asp) SQL Injection Vulnerability
SSV-18328 MDaemon WebAdmin 2.0.X SQL injection
SSV-16101 XOOPS <= 2.0.13.2 xoopsOption[nocommon] Remote Exploit
SSV-16102 Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit
SSV-16100 Woltlab Burning Board <= 2.3.5 (links.php) SQL Injection Exploit
SSV-16097 Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
SSV-16095 phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities
SSV-16098 phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability
SSV-16094 libextractor <= 0.5.13 Multiple Heap Overflow PoC Exploits
SSV-16092 Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability
SSV-16093 ScozNews <= 1.2.1 (mainpath) Remote File Inclusion Vulnerability
SSV-16091 DeluxeBB <= 1.06 (Attachment mod_mime) Remote Exploit
SSV-16090 PHP-Fusion <= 6.00.306 (srch_where) SQL Injection Exploit
SSV-16087 DeluxeBB <= 1.06 (name) Remote SQL Injection Exploit (mq=off)
SSV-16089 ezUserManager <= 1.6 Remote File Inclusion Vulnerability
SSV-16064 ACal <= 2.2.6 (day.php) Remote File Inclusion Vulnerability
SSV-16065 EQdkp <= 1.3.0 (dbal.php) Remote File Inclusion Vulnerability
SSV-16062 PHP-Fusion <= 6.00.306 Multiple Vulnerabilities Exploit
SSV-16063 Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
SSV-16061 VP-ASP 6.00 (shopcurrency.asp) Remote SQL Injection Vulnerability
SSV-16054 StatIt v4 (statitpath) Remote File Inclusion Exploit
SSV-16053 Limbo CMS <= 1.0.4.2 (catid) Remote SQL Injection Exploit
SSV-16041 X7 Chat <= 2.0 (help_file) Remote Commands Execution Exploit
SSV-16040 Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit
SSV-16020 FlexBB <= 0.5.5 (function/showprofile.php) SQL Injection Exploit
SSV-16021 BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability
SSV-16012 Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
SSV-16013 dForum <= 1.5 (DFORUM_PATH) Multiple Remote File Inclusions
SSV-16011 CoreNews <= 2.0.1 (userid) Remote SQL Injection Exploit
SSV-16010 PHPSurveyor <= 0.995 (surveyid) Remote Command Execution Exploit
SSV-16009 ASPSitem <= 1.83 (Haberler.asp) Remote SQL Injection Exploit
SSV-16001 FlexBB <= 0.5.5 (/inc/start.php _COOKIE) Remote SQL ByPass Exploit
SSV-15999 Fuju News 1.0 Authentication Bypass / Remote SQL Injection Exploit
SSV-16000 Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit
SSV-15998 Symantec Sygate Management Server (login) SQL Injection Exploit
SSV-15984 Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
SSV-15983 Clansys v.1.1 (showid) Remote SQL Injection Exploit
SSV-15976 dnGuestbook <= 2.0 Remote SQL Injection Vulnerabilities
SSV-15975 ADODB < 4.70 (PhpOpenChat 3.0.x) Server.php SQL Injection Exploit
SSV-15978 XBrite Members <= 1.1 (id) Remote SQL Injection Exploit
SSV-15977 Autonomous LAN Party <= 0.98.1.0 Remote File Inclusion Vulnerability
SSV-15979 Sire 2.0 (lire.php) Remote File Inclusion/Arbitary File Upload Vulnerability
SSV-15955 EzASPSite <= 2.0 RC3 (Scheme) Remote SQL Injection Exploit
SSV-15956 Tru64 UNIX 5.0 (Rev. 910) rdist NLSPATH Buffer Overflow Exploit
SSV-15957 Tru64 UNIX 5.0 (Rev. 910) edauth NLSPATH Buffer Overflow Exploit
SSV-15952 GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
SSV-15950 PHPCollab 2.x / NetOffice 2.x (sendpassword.php) SQL Injection Exploit
SSV-15951 GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)
SSV-15942 PHP Ticket <= 0.71 (search.php) Remote SQL Injection Exploit
SSV-15944 TFT Gallery <= 0.10 [Password Disclosure] Remote Exploit
SSV-15943 phpBookingCalendar <= 1.0c [details_view.php] Remote SQL Injection
SSV-15932 ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
SSV-15930 gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit
SSV-15929 SoftBB 0.1 (mail) Remote Blind SQL Injection Exploit
SSV-15925 BetaParticle Blog <= 6.0 (fldGalleryID) Remote SQL Injection Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English