HexBrain
Sign in

Browse / SQL Injection

SQL Injection

332disclosed reports
3weaknesses
$184,652paid in bounties

See it on the mapBypass libraryPayloads

Weaknesses in this class

Often found together with

Most upvoted SQL Injection reports

AllValidInformativeN/ADuplicate

  1. SQL Injection Extracts Starbucks Enterprise Accounting, Financial, Payroll DatabaseSQL Injection · critical · Starbucks
    801 votes
  2. SQL injection in https://labs.data.gov/dashboard/datagov/csv_to_json via User-agent SQL Injection · critical · GSA Bounty
    699 votes
  3. SQL Injection in report_xml.php through countryFilter[] parameterSQL Injection · critical · Valve
    $25,000410 votes
  4. [www.zomato.com] SQLi - /php/██████████ - item_idSQL Injection · critical · Eternal
    $4,500326 votes
  5. SQL Injection on cookie parameterSQL Injection · high · MTN Group
    323 votes
  6. SQL Injection in agent-managerSQL Injection · high · Acronis
    237 votes
  7. Blind SQLi leading to RCE, from Unauthenticated access to a test API WebserviceSQL Injection · critical · Starbucks
    236 votes
  8. Blind SQL Injection on starbucks.com.gt and WAF Bypass :*SQL Injection · high · Starbucks
    210 votes
  9. www.drivegrab.com SQL injectionSQL Injection · high · Grab
    $4,500205 votes
  10. Blind SQL injection on id.indrive.comBlind SQL Injection · critical · inDrive
    $4,134199 votes
  11. SQL injection in GraphQL endpoint through embedded_submission_form_uuid parameterSQL Injection · critical · HackerOne
    174 votes
  12. Sql injection on docs.atavist.comSQL Injection · high · Automattic
    170 votes
  13. bypass sql injection #1109311SQL Injection · medium · Acronis
    164 votes
  14. SQLi | in URL pathsSQL Injection · critical · MTN Group
    149 votes
  15. SQL Injection vulnerability found on ibm.com endpointSQL Injection · critical · IBM
    137 votes
  16. SQL Injection Union BasedSQL Injection · critical · Automattic
    137 votes
  17. Solr Injection in `user_id` parameter at :/v2/leaderboard_v2.jsonSQL Injection · critical · Eternal
    $2,000137 votes
  18. [intensedebate.com] SQL Injection Time Based On /js/commentAction/SQL Injection · critical · Automattic
    130 votes
  19. SQL injection in structure pluginSQL Injection · medium · ExpressionEngine
    125 votes
  20. SQL Injection at https://files.palantir.com/ due to CVE-2021-38159SQL Injection · high · Palantir Public
    121 votes
  21. SQL injection on admin.acronis.host development web serviceSQL Injection · high · Acronis
    $250118 votes
  22. SQL injection in URL path leads to Database AccessSQL Injection · critical · MTN Group
    115 votes
  23. SQL injection in https://www.acronis.cz/ via the log parameterSQL Injection · medium · Acronis
    103 votes
  24. SQL Injection intensedebate.comSQL Injection · medium · Automattic
    102 votes
  25. Complete authentication bypass to admin permissionsSQL Injection · critical · Rocket.Chat
    100 votes
  26. SQL Injection when using FilteredRelationSQL Injection · critical · Django
    96 votes
  27. Woocommerce SQL Injection in WC_Report_Coupon_UsageSQL Injection · medium · Automattic
    96 votes
  28. Time based SQL injection at████████SQL Injection · high · U.S. Dept Of Defense
    96 votes
  29. Error-Based & Time-Based SQL Injection in 'keyword' Parameter of admin-search.php Allowing Full Database Access in Revive Adserver v6.0.0SQL Injection · high · Revive Adserver
    93 votes
  30. SQL Injection on prod.oidc-proxy.prod.webservices.mozgcp.net via invite_code parameter - Mozilla social inscriptionSQL Injection · critical · Mozilla
    93 votes
  31. SQL Injection on sctrack.email.uber.com.cnSQL Injection · Uber
    $4,00093 votes
  32. SQL InjectionSQL Injection · high · U.S. Dept Of Defense
    91 votes
  33. SQL Injection in CVE Discovery Search SQL Injection · high · HackerOne
    87 votes
  34. [SQLI ]Time Bassed Injection at ██████████ via referer headerSQL Injection · high · U.S. Dept Of Defense
    87 votes
  35. Blind Sql Injection in https://████SQL Injection · medium · U.S. Dept Of Defense
    81 votes
  36. SQL Injection in Column Type Parameter Allows Arbitrary SQL ExecutionSQL Injection · high · Nextcloud
    80 votes
  37. [intensedebate.com] SQL Injection Time Based on /changeReplaceOpt.phpSQL Injection · critical · Automattic
    80 votes
  38. SQL Injection on www.██████████ on countID parameterSQL Injection · high · U.S. Dept Of Defense
    80 votes
  39. SQL Injection in Django ORM via Unvalidated `_connector` in Q ObjectsSQL Injection · critical · Django
    77 votes
  40. Arbitrary SQL command injectionSQL Injection · critical · Nextcloud
    77 votes
  41. SQL Injection at https://████ via ███ parameterSQL Injection · critical · Sony
    74 votes
  42. SQL Injection in ████SQL Injection · high · U.S. Dept Of Defense
    73 votes
  43. sqli on █████████ search functionalitySQL Injection · medium · Mars
    72 votes
  44. [https://reviews.zomato.com] Time Based SQL InjectionSQL Injection · critical · Eternal
    $1,00072 votes
  45. SQL injection in JSONField KeyTransformSQL Injection · high · Django
    68 votes
  46. Blind SQL injection at tsftp.informatica.comSQL Injection · critical · Informatica
    68 votes
  47. [www.zomato.com] Blind SQL Injection in /php/geto2bannerSQL Injection · critical · Eternal
    $2,00068 votes
  48. Boolen Based Blind Sql Injection Via User Agent in ███.milSQL Injection · medium · U.S. Dept Of Defense
    67 votes
  49. Time Based SQL InjectionSQL Injection · critical · U.S. Department of State
    64 votes
  50. SQL injection at ███████SQL Injection · critical · Sony
    63 votes
  51. [www.zomato.com] SQLi on `order_id` parameterSQL Injection · critical · Eternal
    $1,00063 votes
  52. SQLi At `███████` via `theme_name` SQL Injection · critical · Mars
    62 votes
  53. CVE-2024-53908: Django Potential SQL injection in `HasKey(lhs, rhs)` on OracleSQL Injection · high · Internet Bug Bounty
    61 votes
  54. Unauthenticated SQL Injection at █████████ [HtUS]SQL Injection · critical · U.S. Dept Of Defense
    61 votes
  55. Blind SQL injection in third-party software, that allows to reveal user statistic from rocket.chat and possibly hack into the rocketchat.agilecrm.comSQL Injection · Rocket.Chat
    61 votes
  56. [www.zomato.com] Union SQLi + Waf BypassSQL Injection · Eternal
    $1,00061 votes
  57. SQL injection in 3rd party software AnomaliSQL Injection · high · Uber
    $2,50061 votes
  58. Time-base SQL Injection in Search UsersSQL Injection · medium · Concrete CMS
    60 votes
  59. Multiple vulnerabilities in a WordPress plugin at drive.uber.comSQL Injection · Uber
    55 votes
  60. SQL Injection in IBM access control panel & Broken access in admin panelSQL Injection · critical · IBM
    54 votes
  61. [www.zomato.com] Blind SQL Injection in /php/widgets_handler.phpSQL Injection · critical · Eternal
    $2,00054 votes
  62. Time-based blind SQL injectionSQL Injection · medium · U.S. Dept Of Defense
    53 votes
  63. Potential SQL Injection when annotating FilteredRelation on PostgreSQLSQL Injection · high · Django
    52 votes
  64. CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()SQL Injection · high · Internet Bug Bounty
    $4,26352 votes
  65. Blind SQL injection via clientid parameter in zone‑include.phpSQL Injection · high · Revive Adserver
    49 votes
  66. SQL injection in https://demor.adr.acronis.com/ via the username parameterSQL Injection · high · Acronis
    49 votes
  67. SQL Injection in ████SQL Injection · high · U.S. Dept Of Defense
    49 votes
  68. Sqli on ██████ search functionalitySQL Injection · medium · Mars
    47 votes
  69. SQL Injection vulnerability located at ████████SQL Injection · high · U.S. Dept Of Defense
    45 votes
  70. Blind SQL Injection SQL Injection · critical · MTN Group
    43 votes
  71. SQLI on uberpartner.eu leads to exposure of sensitive user data of Uber partnersSQL Injection · high · Uber
    $1,50043 votes
  72. SQLi at █████ parameterSQL Injection · critical · Mars
    42 votes
  73. sql injection via https://setup.p2p.ihost.com/SQL Injection · critical · IBM
    41 votes
  74. SQL injection in /errors/viewbuild/SQL Injection · critical · Valve
    41 votes
  75. SQL injection in MilestoneFinder order methodSQL Injection · critical · GitLab
    $2,00041 votes
  76. [www.zomato.com] Boolean SQLi - /█████.phpSQL Injection · Eternal
    $1,00041 votes
  77. Critical SQL Injection WDM API (████████)SQL Injection · critical · Essity
    40 votes
  78. Blind Sql Injection https:/████████SQL Injection · medium · U.S. Dept Of Defense
    39 votes
  79. SQL injection in Wordpress Plugin Huge IT Video Gallery at https://drive.uber.com/frmarketplace/SQL Injection · Uber
    $3,00039 votes
  80. SQL Injection vulnerability found on IBM.com subdomainSQL Injection · IBM
    36 votes
  81. SQL Injection found in NextCloud Android App Content ProviderSQL Injection · low · Nextcloud
    $15036 votes
  82. Apache Airflow Sql injection by authenticated userSQL Injection · low · Internet Bug Bounty
    $50535 votes
  83. SQL injection in URL path processing on www.ibm.comSQL Injection · critical · IBM
    35 votes
  84. [www.zomato.com] Boolean SQLi - /███████.phpSQL Injection · Eternal
    $1,00035 votes
  85. Time-based Blind SQLi on news.starbucks.comSQL Injection · high · Starbucks
    35 votes
  86. SQL injection on ██████████ via 'where' parameterSQL Injection · medium · U.S. Dept Of Defense
    34 votes
  87. SQL Injection found on ibm.com subdomainSQL Injection · critical · IBM
    33 votes
  88. sqliSQL Injection · critical · Ubiquiti Inc.
    33 votes
  89. SQL Injection on the administrator panelSQL Injection · critical · MTN Group
    32 votes
  90. SQL Injection at https://████████.asp (█████████) [selMajcom] [HtUS]SQL Injection · critical · U.S. Dept Of Defense
    30 votes
  91. SQL Injection on https://soa-accp.glbx.tva.gov/ via "/api/" path - VI-21-015SQL Injection · critical · Tennessee Valley Authority
    30 votes
  92. SQL Injection through /include/findusers.phpSQL Injection · critical · ImpressCMS
    30 votes
  93. SOAP WSDL Parser SQL Code ExecutionSQL Injection · critical · U.S. Dept Of Defense
    30 votes
  94. Blind SQL Injection on █████ via URI PathSQL Injection · critical · Mars
    29 votes
  95. Ability to escape database transaction through SQL injection, leading to arbitrary code executionSQL Injection · high · HackerOne
    29 votes
  96. SQL injection at [https://█████████] [HtUS]SQL Injection · critical · U.S. Dept Of Defense
    29 votes
  97. SQLI on desafio5estrelas.com SQL Injection · medium · Uber
    $2,50029 votes
  98. SQL injection SQL Injection · high · U.S. Dept Of Defense
    29 votes
  99. [ipm.informatica.com] Sql injection Oracle SQL Injection · critical · Informatica
    28 votes
  100. MariaDB CLI Utility IssuesSQL Injection · MariaDB
    27 votes