漏洞分类 — SQL 注入

英文名字
SQL injection
漏洞详情：
SQL 注入，就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串，最终达到欺骗服务器执行恶意的SQL命令。

相关漏洞

SSV ID 漏洞名称
SSV-15908 d2kBlog 1.0.3 (memName) Remote SQL Injection Exploit
SSV-15907 RedBLoG <= 0.5 (cat_id) Remote SQL Injection Exploit
SSV-15903 CilemNews System <= 1.1 (yazdir.asp haber_id) SQL Injection Exploit
SSV-15897 D2-Shoutbox 4.2 IPB Mod (load) Remote SQL Injection Exploit
SSV-15891 PHP-Stats <= 0.1.9.1 Remote Commands Execution Exploit
SSV-15892 TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit
SSV-15893 Multiple Routers (IRC Request) Disconnect Denial of Service Vulnerability
SSV-15890 MyBulletinBoard (MyBB) <= 1.04 (misc.php COMMA) SQL Injection (2)
SSV-15887 Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection
SSV-15886 vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)
SSV-15882 MyBulletinBoard (MyBB) <= 1.03 (misc.php COMMA) SQL Injection
SSV-15874 Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
SSV-15876 SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
SSV-15875 Pentacle In-Out Board <= 6.03 (login.asp) Remote Auth Bypass
SSV-15878 PwsPHP <= 1.2.3 (index.php) Remote SQL Injection Exploit
SSV-15872 Lansuite <= 2.1.0 Beta (fid) Remote SQL Injection Exploit
SSV-15871 phpWebSite <= 0.10.0-full (topics.php) Remote SQL Injection Exploit
SSV-15869 PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit
SSV-15870 VHCS <= 2.4.7.1 (Add User) Authentication Bypass Exploit
SSV-15865 PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit
SSV-15864 ilchClan <= 1.05g (tid) Remote SQL Injection Exploit
SSV-15863 GeekLog 1.* (error.log) Remote Commands Execution Exploit (gpc = Off)
SSV-15861 BXCP <= 0.2.9.9 (tid) Remote SQL Injection Exploit
SSV-15862 MiniNuke <= 1.8.2b (pages.asp) Remote SQL Injection Exploit
SSV-15857 Zorum Forum 3.5 (rollid) Remote SQL Injection Exploit
SSV-15852 MyBulletinBoard (MyBB) <= 1.03 Multiple SQL Injection Exploit
SSV-15851 webSPELL <= 4.01 (title_op) Remote SQL Injection Exploit
SSV-15848 EnterpriseGS <= 1.0 rc4 Remote Commands Execution Exploit
SSV-15847 Invision Power Board Army System Mod 2.1 SQL Injection Exploit
SSV-15849 FlySpray 0.9.7 (install-0.9.7.php) Remote Commands Execution Exploit
SSV-15835 Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit
SSV-15834 ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
SSV-15832 phpBB 2.0.19 (Style Changer/Demo Mod) SQL Injection Exploit
SSV-15831 Clever Copy <= 3.0 Admin Auth Details / Remote SQL Injection Exploit
SSV-15828 Invision Power Board Dragoran Portal Mod <= 1.3 SQL Injection Exploit
SSV-15824 Phpclanwebsite 1.23.1 (par) Remote SQL Injection Exploit
SSV-15818 MiniNuke <= 1.8.2 (news.asp hid) SQL Injection Exploit
SSV-15817 MiniNuke <= 1.8.2 Multiple SQL Injection Vulnerabilities
SSV-15811 Valdersoft Shopping Cart <= 3.0 Remote Command Execution Exploit
SSV-15810 CuteNews <= 1.4.1 (categories.mdu) Remote Command Execution Exploit
SSV-15809 WebWiz Products (1.0 <= 3.06) Login Bypass SQL Injection Exploits
SSV-15801 Dev Web Management System <= 1.5 (cat) Remote SQL Injection Exploit
SSV-15802 phpBB <= 2.0.17 (signature_bbcode_uid) Remote Command Exploit
SSV-15800 PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit
SSV-13621 Lyris ListManager Read Message Attachment SQL Injection Exploit
SSV-15778 Zen Cart <= 1.2.6d (password_forgotten.php) SQL Injection Exploit
SSV-15764 EkinBoard 1.0.3 (config.php) SQL Injection / Command Execution Exploit
SSV-15760 PHPWebThings <= 1.4 (forum) SQL Injection Exploit
SSV-15761 PHP-Nuke <= 7.8 Search Module Remote SQL Injection Exploit
SSV-15759 PHPWebThings <= 1.4 (msg/forum) SQL Injection Exploit
SSV-15756 Arki-DB 1.0 (catid) Remote SQL Injection Vulnerabilities
SSV-15758 Wizz Forum 1.20 (TopicID) Remote SQL Injection Exploit
SSV-15757 Cyphor 0.19 (show.php id) Remote SQL Injection Exploit
SSV-15755 Unclassified NewsBoard 1.5.3 Patch 3 Blind SQL Injection Exploit
SSV-15754 Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
SSV-15750 Moodle <= 1.6dev SQL Injection / Command Execution Exploit
SSV-15745 ATutor 1.5.1pl2 SQL Injection / Command Execution Exploit
SSV-15743 ibProArcade 2.x module (vBulletin/IPB) Remote SQL Injection Exploit
SSV-15729 VuBB Forum RC1 (m) Remote SQL Injection Exploit
SSV-15728 Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
SSV-15727 TClanPortal <= 1.1.3 (id) Remote SQL Injection Exploit
SSV-15725 PHP-Nuke 7.8 SQL Injection / Remote Command Execution Exploit
SSV-15717 e107 <= 0.6172 (resetcore.php) Remote SQL Injection Exploit
SSV-15713 Opera <= 8.02 Remote Denial of Service Exploit
SSV-15712 Mozilla (Firefox <= 1.0.7) (Thunderbird <= 1.0.6) Denial of Service Exploit
SSV-15711 MuOnline Loopholes Web Server (pkok.asp) SQL Injection Exploit
SSV-15707 versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit
SSV-15704 Cyphor <= 0.19 (board takeover) SQL Injection Exploit
SSV-15703 Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit
SSV-15700 PHP-Fusion 6.00.109 (msg_send) SQL Injection Exploit
SSV-15693 MailGust <= 1.9 (board takeover) SQL Injection Exploit
SSV-15692 phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit
SSV-15691 My Little Forum <= 1.5 (searchstring) SQL Injection Exploit
SSV-15687 PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit
SSV-15685 phpWebSite <= 0.10.0 (module) SQL Injection Exploit
SSV-15680 PhpTagCool <= 1.0.3 SQL Injection Attacks Exploit
SSV-19614 ASP-Nuke <= 0.80 comment_post.asp远程SQL注入漏洞
SSV-15649 PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit
SSV-15648 MySQL Eventum <= 1.5.5 (login.php) SQL Injection Exploit
SSV-13654 CA BrightStor ARCserve Backup Agent (dbasqlr.exe) Remote Exploit
SSV-15642 phpBB 2.0.15 Remote PHP Code Execution Exploit (metasploit)
SSV-15641 Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit
SSV-15640 Open Bulletin Board <= 1.0.5 SQL Injection Exploit
SSV-15625 xmlrpc.php Library <= 1.3.0 Remote Command Execute Exploit (3)
SSV-15624 xmlrpc.php Library <= 1.3.0 Remote Command Execute Exploit (2)
SSV-15623 XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
SSV-15620 XML-RPC Library <= 1.3.0 (xmlrpc.php) Remote Code Injection Exploit
SSV-15619 Wordpress <= 1.5.1.2 xmlrpc Interface SQL Injection Exploit
SSV-15617 Stream / Raped Denial of Service Attack (win version)
SSV-15616 ASPNuke <= 0.80 (comment_post.asp) SQL Injection Exploit
SSV-15615 ASPNuke <= 0.80 (article.asp) SQL Injection Exploit
SSV-15614 UBB Threads < 6.5.2 Beta (mailthread.php) SQL Injection Exploit
SSV-15609 Cacti <= 0.8.6d Remote Command Execution Exploit
SSV-15610 phpBB <= 2.0.15 Register Multiple Users Denial of Service (c code)
SSV-15589 WordPress <= 1.5.1.1 SQL Injection Exploit
SSV-15605 MercuryBoard <= 1.1.4 SQL Injection Exploit
SSV-15608 Mambo <= 4.5.2.1 SQL Injection Exploit
SSV-15606 WordPress <= 1.5.1.1 ""add new admin"" SQL Injection Exploit
SSV-15604 Simple Machines Forum <= 1.0.4 (modify) SQL Injection Exploit
SSV-15607 Forum Russian Board 4.2 Full Command Execution Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English