地图 / SQL 注入SQL 注入
SQL Injection · SQL 注入
SQL 注入 / SQL 注入
313公开报告
—CWE 编号
0已标注发现方式
313关联报告
发现方式分布
暂无发现方式标注。
关联报告
SQL Injection Extracts Starbucks Enterprise Accounting, Financial, Payroll DatabaseStarbucks · 2019-08-06 · 高危 · 801 票SQL injection in https://labs.data.gov/dashboard/datagov/csv_to_json via User-agentGSA Bounty · 2019-03-22 · 高危 · 699 票Time-Based SQL injection at city-mobil.ruMail.ru · — · 未评级 · $15,000 · 631 票SQL injection at https://sea-web.gold.razer.com/ajax-get-status.php via txid parameterRazer · — · 未评级 · $2,000 · 580 票SQL Injection in https://api-my.pay.razer.com/inviteFriend/getInviteHistoryLogRazer · — · 未评级 · $2,000 · 528 票Blind SQL InjectionInnoGames · — · 未评级 · $2,000 · 432 票SQL Injection in report_xml.php through countryFilter[] parameterValve · 2018-07-27 · 高危 · $25,000 · 410 票SQL injection at fleet.city-mobil.ruMail.ru · — · 未评级 · $10,000 · 372 票[windows10.hi-tech.mail.ru] Blind SQL InjectionMail.ru · — · 未评级 · $5,000 · 330 票[www.zomato.com] SQLi - /php/██████████ - item_idEternal · 2018-09-11 · 高危 · $4,500 · 326 票SQL Injection on cookie parameterMTN Group · 2020-05-03 · 中危 · 323 票SQL Injection at https://sea-web.gold.razer.com/lab/cash-card-incomplete-translog-resend via period-hour ParameterRazer · — · 未评级 · $2,000 · 240 票SQL Injection in agent-managerAcronis · 2021-08-16 · 中危 · 237 票Blind SQLi leading to RCE, from Unauthenticated access to a test API WebserviceStarbucks · 2019-07-22 · 高危 · 236 票[api.easy2pay.co] SQL Injection at fortumo via TransID parameter [Bypassing Signature Validation🔥]Razer · — · 未评级 · $4,000 · 232 票Boolean-based SQL Injection on relap.ioMail.ru · — · 未评级 · 227 票Blind SQL Injection in city-mobil.ru domainMail.ru · — · 未评级 · $2,000 · 224 票SQL LIKE clauses wildcard injectionMail.ru · — · 未评级 · $8,000 · 217 票Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)Pornhub · — · 未评级 · 211 票Blind SQL Injection on starbucks.com.gt and WAF Bypass :*Starbucks · 2019-06-19 · 中危 · 210 票www.drivegrab.com SQL injectionGrab · 2017-11-17 · 中危 · $4,500 · 205 票SQLi at https://sea-web.gold.razer.com/demo-th/purchase-result.php via orderid ParameterRazer · — · 未评级 · $2,000 · 183 票Blind SQL injection in Hall of FapPornhub · — · 未评级 · 179 票SQL injection in GraphQL endpoint through embedded_submission_form_uuid parameterHackerOne · 2018-11-30 · 高危 · 174 票Sql injection on docs.atavist.comAutomattic · 2020-12-08 · 中危 · 170 票bypass sql injection #1109311Acronis · 2021-10-05 · 低危 · 164 票SQL Injection [unauthenticated] with direct output at https://news.mail.ru/Mail.ru · — · 未评级 · $7,500 · 156 票SQLi | in URL pathsMTN Group · 2025-03-06 · 高危 · 149 票SQL Injection vulnerability found on ibm.com endpointIBM · 2026-03-12 · 高危 · 137 票Solr Injection in `user_id` parameter at :/v2/leaderboard_v2.jsonEternal · 2020-08-10 · 高危 · $2,000 · 137 票[intensedebate.com] SQL Injection Time Based On /js/commentAction/Automattic · 2021-01-01 · 高危 · 130 票SQL injection in structure pluginExpressionEngine · 2026-01-26 · 低危 · 125 票SQL injection in Razer Gold List Admin at /lists/index.php via the `list[]` parameter.Razer · — · 未评级 · $2,000 · 122 票SQL Injection at https://files.palantir.com/ due to CVE-2021-38159Palantir Public · 2022-04-05 · 中危 · 121 票SQL Injection at api.easy2pay.co/add-on/get-sig.php via partner_id ParameterRazer · — · 未评级 · $2,000 · 119 票SQL injection on admin.acronis.host development web serviceAcronis · 2021-06-22 · 中危 · $250 · 118 票SQL injection in URL path leads to Database AccessMTN Group · 2025-01-08 · 高危 · 115 票SQL injection in https://www.acronis.cz/ via the log parameterAcronis · 2021-06-11 · 低危 · 103 票SQL Injection intensedebate.comAutomattic · 2021-01-11 · 低危 · 102 票Complete authentication bypass to admin permissionsRocket.Chat · 2026-04-22 · 高危 · 100 票SQL Injection when using FilteredRelationDjango · 2025-09-15 · 高危 · 96 票Woocommerce SQL Injection in WC_Report_Coupon_UsageAutomattic · 2025-06-24 · 低危 · 96 票Time based SQL injection at████████U.S. Dept Of Defense · 2024-01-26 · 中危 · 96 票Error-Based & Time-Based SQL Injection in 'keyword' Parameter of admin-search.php Allowing Full Database Access in Revive Adserver v6.0.0Revive Adserver · 2025-10-24 · 中危 · 93 票SQL Injection on prod.oidc-proxy.prod.webservices.mozgcp.net via invite_code parameter - Mozilla social inscriptionMozilla · 2024-01-30 · 高危 · 93 票turboslim.lady.mail.ru - Blind sql-injection.Mail.ru · — · 未评级 · $5,000 · 93 票SQL Injection on sctrack.email.uber.com.cnUber · 2016-07-25 · 未评级 · $4,000 · 93 票SQL InjectionU.S. Dept Of Defense · 2024-10-25 · 中危 · 91 票SQL Injection in CVE Discovery SearchHackerOne · 2023-03-06 · 中危 · 87 票[SQLI ]Time Bassed Injection at ██████████ via referer headerU.S. Dept Of Defense · 2020-10-16 · 中危 · 87 票SQL injection on jd.mail.ruMail.ru · — · 未评级 · $300 · 87 票3igames.mail.ru SQL InjectionMail.ru · — · 未评级 · $1,500 · 86 票Blind Sql Injection in https://████U.S. Dept Of Defense · 2024-08-29 · 低危 · 81 票SQL Injection in Column Type Parameter Allows Arbitrary SQL ExecutionNextcloud · 2026-05-15 · 中危 · 80 票[intensedebate.com] SQL Injection Time Based on /changeReplaceOpt.phpAutomattic · 2021-01-01 · 高危 · 80 票Blind SQL Injection at http://easytopup.in.th/es-services/mps.php via serial_no parameterRazer · — · 未评级 · $1,000 · 80 票SQL Injection on www.██████████ on countID parameterU.S. Dept Of Defense · 2019-10-08 · 中危 · 80 票SQL Injection in Django ORM via Unvalidated `_connector` in Q ObjectsDjango · 2025-11-06 · 高危 · 77 票Arbitrary SQL command injectionNextcloud · 2019-07-21 · 高危 · 77 票SQL injection delivery-club.ru (ClickHouse)Mail.ru · — · 未评级 · $5,000 · 76 票SQL Injection on https://www.olx.co.idOLX · — · 未评级 · 75 票SQL Injection at https://████ via ███ parameterSony · 2023-04-24 · 高危 · 74 票SQL Injection in ████U.S. Dept Of Defense · 2019-08-19 · 中危 · 73 票sqli on █████████ search functionalityMars · 2024-06-25 · 低危 · 72 票[https://reviews.zomato.com] Time Based SQL InjectionEternal · 2018-02-02 · 高危 · $1,000 · 72 票SQL injection in JSONField KeyTransformDjango · 2025-09-12 · 中危 · 68 票Blind SQL injection at tsftp.informatica.comInformatica · 2020-11-16 · 高危 · 68 票[www.zomato.com] Blind SQL Injection in /php/geto2bannerEternal · 2020-08-10 · 高危 · $2,000 · 68 票Blind SQL Injection(Time Based Payload) in https://www.easytopup.in.th/store/game/digimon-master via CheckuserForm[user_id]Razer · — · 未评级 · $1,000 · 68 票Boolen Based Blind Sql Injection Via User Agent in ███.milU.S. Dept Of Defense · 2025-01-24 · 低危 · 67 票Time Based SQL InjectionU.S. Department of State · 2023-04-20 · 高危 · 64 票SQL injection at ███████Sony · 2024-01-24 · 高危 · 63 票[www.zomato.com] SQLi on `order_id` parameterEternal · 2018-05-30 · 高危 · $1,000 · 63 票SQLi At `███████` via `theme_name`Mars · 2026-02-24 · 高危 · 62 票SQL Injection at https://lite.r-keeper.ru/site_api/clients/derision/?lang=ruMail.ru · — · 未评级 · $1,500 · 62 票CVE-2024-53908: Django Potential SQL injection in `HasKey(lhs, rhs)` on OracleInternet Bug Bounty · 2025-02-07 · 中危 · 61 票Unauthenticated SQL Injection at █████████ [HtUS]U.S. Dept Of Defense · 2022-10-14 · 高危 · 61 票Blind SQL injection in third-party software, that allows to reveal user statistic from rocket.chat and possibly hack into the rocketchat.agilecrm.comRocket.Chat · 2019-10-17 · 未评级 · 61 票[www.zomato.com] Union SQLi + Waf BypassEternal · 2017-09-19 · 未评级 · $1,000 · 61 票SQL injection in 3rd party software AnomaliUber · 2017-03-21 · 中危 · $2,500 · 61 票Time-base SQL Injection in Search UsersConcrete CMS · 2020-08-05 · 低危 · 60 票Blind SQL in id_locality GET param on [city-mobil.ru/taxiserv]Mail.ru · — · 未评级 · $3,500 · 55 票Multiple vulnerabilities in a WordPress plugin at drive.uber.comUber · 2016-08-23 · 未评级 · 55 票SQL Injection in IBM access control panel & Broken access in admin panelIBM · 2021-10-18 · 高危 · 54 票[www.zomato.com] Blind SQL Injection in /php/widgets_handler.phpEternal · 2020-08-10 · 高危 · $2,000 · 54 票SQL Injection https://www.olx.co.idOLX · — · 未评级 · 54 票Time-based blind SQL injectionU.S. Dept Of Defense · 2025-01-24 · 低危 · 53 票Potential SQL Injection when annotating FilteredRelation on PostgreSQLDjango · 2025-12-02 · 中危 · 52 票Blind SQL Injection on news.mail.ruMail.ru · — · 未评级 · $3,000 · 52 票A SQL injection vulnerability in VanillaVanilla · — · 未评级 · $600 · 51 票SQL Injection /webApp/oma_conf ctx parameter (viestinta.lahitapiola.fi)LocalTapiola · — · 未评级 · $1,350 · 50 票[contact-sys.com] SQL Injection████ limit paramQIWI · — · 未评级 · 50 票Blind SQL injection via clientid parameter in zone‑include.phpRevive Adserver · 2026-06-03 · 中危 · 49 票SQL injection in https://demor.adr.acronis.com/ via the username parameterAcronis · 2024-08-28 · 中危 · 49 票SQL Injection in ████U.S. Dept Of Defense · 2019-08-19 · 中危 · 49 票Sqli on ██████ search functionalityMars · 2024-06-25 · 低危 · 47 票SQL Injection vulnerability located at ████████U.S. Dept Of Defense · 2019-08-15 · 中危 · 45 票Vanilla SQL Injection VulnerabilityVanilla · — · 未评级 · $600 · 45 票[city-mobil.ru/taxiserv/] SQLi at /taxiserv/tariffs/dictionary at filter{"id_locality"} paramMail.ru · — · 未评级 · 44 票Blind SQL InjectionMTN Group · 2021-08-14 · 高危 · 43 票查看全部 313 份报告 →