Sqli
- Marketing Site
A SQL injection in an invoice search dumped a user table, the password doubled as an SSH login, and a sudo awk entry handed over root.
- SQL Injection in Cisco NDFC REST API
A REST API endpoint and the web UI of Cisco NDFC are vulnerable to SQL injection, letting an authenticated read-only user read, modify, or delete arbitrary data.
- SqLSleuth
A SQL injection login bypass opened a recon trail of hidden directories, DB creds, and a riddle pointing at combining encoded values into a PDF. Co-worked with ZyWAC.
- SQL Injection in SourceCodester Testimonial Page Manager
The delete-testimonial endpoint in SourceCodester Testimonial Page Manager 1.0 puts the testimony argument into a SQL query unsanitized, allowing remote SQL injection without …
- SQL Injection in SourceCodester IMS (edit_sell.php)
The up_pid parameter in edit_sell.php of SourceCodester Inventory Management System 1.0 is concatenated into a SQL query unsanitized, allowing remote, unauthenticated SQL …
- SQL Injection in SourceCodester IMS (sell_return.php)
The pid parameter in sell_return.php of SourceCodester Inventory Management System 1.0 is used in a SQL query unsanitized, allowing remote, unauthenticated SQL injection.