https://poc.intelseclab.com/tags/blind-sqli/Latest proof-of-concept entries.Hugoen-usSat, 11 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-11_cve-2026-42208-litellm-sqli-proxy-authbypass/Sat, 11 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-11_cve-2026-42208-litellm-sqli-proxy-authbypass/Critical severity (CVSS 9.8) — web · CVE-2026-42208 (GHSA-r75f-5x8p-qvmc). Status: Weaponized (public working PoC + Docker lab, actively exploited in the wild within 36 hours of disclosure). Affects: LiteLLM Proxy — open-source LLM/AI gateway (22,000+ GitHub stars) fronting OpenAI, Anthropic, and other model provider APIs. Tags: litellm, ai-gateway, llm-proxy, sql-injection, cwe-89, unauthenticated, remote, blind-sqli, kev-adjacent, credential-theft.webCriticallitellmai-gatewayllm-proxysql-injectioncwe-89unauthenticatedremoteblind-sqlikev-adjacentcredential-thefthttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-11391-ppom-woocommerce-blind-sqli/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-11391-ppom-woocommerce-blind-sqli/Critical severity (CVSS 9.8) — web · CVE-2025-11391. Status: Patched. Affects: PPOM for WooCommerce (woocommerce-product-addon plugin). Tags: wordpress, woocommerce, ppom, product-addon, sql-injection, blind-sqli, time-based, cwe-89, python, php.webCriticalwordpresswoocommerceppomproduct-addonsql-injectionblind-sqlitime-basedcwe-89pythonphphttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-3180-contest-gallery-blind-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-3180-contest-gallery-blind-sqli/High severity — web · CVE-2026-3180. Status: PoC. Affects: WordPress "Contest Gallery" plugin. Tags: wordpress, sqli, blind-sqli, plugin, admin-ajax, unauthenticated, php, boolean-based.webHighwordpresssqliblind-sqlipluginadmin-ajaxunauthenticatedphpboolean-basedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49772-events-calendar-blind-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49772-events-calendar-blind-sqli/Critical severity (CVSS 9.3) — web · CVE-2026-49772. Status: PoC. Affects: The Events Calendar (WordPress plugin, StellarWP / Liquid Web), experimental tec/v1 REST API. Tags: wordpress, sqli, blind-sqli, rest-api, the-events-calendar, unauthenticated, python.webCriticalwordpresssqliblind-sqlirest-apithe-events-calendarunauthenticatedpythonhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4112-sonicwall-sma-sqli-hash-extraction/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4112-sonicwall-sma-sqli-hash-extraction/High severity (CVSS 7.2) — network · CVE-2026-4112 (SonicWall Advisory SNWLID-2026-0003). Status: Weaponized. Affects: SonicWall SMA 8200v management console (Jetty + Struts 2, port 8443). Tags: sonicwall, sma, sql-injection, blind-sqli, privilege-escalation, load-file, hash-extraction, appliance.networkHighsonicwallsmasql-injectionblind-sqliprivilege-escalationload-filehash-extractionappliancehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49048-joomcck-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49048-joomcck-sqli/Critical severity (CVSS 8.7) — web · CVE-2026-49048 (Advisory ID JOOMCCK-2026-001). Status: PoC. Affects: JoomCCK (com_joomcck) — Content Construction Kit extension for Joomla, by JoomCoder. Tags: joomla, joomcck, com_joomcck, sql-injection, cwe-89, missing-authorization, cwe-862, unauthenticated, blind-sqli, union-based.webCriticaljoomlajoomcckcom_joomccksql-injectioncwe-89missing-authorizationcwe-862unauthenticatedblind-sqliunion-basedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49079-jetsearch-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49079-jetsearch-sqli/High severity (CVSS 7.5) — web · CVE-2026-49079. Status: PoC. Affects: JetSearch plugin for WordPress. Tags: wordpress, jetsearch, sql-injection, cwe-89, unauthenticated, ajax, union-based, blind-sqli.webHighwordpressjetsearchsql-injectioncwe-89unauthenticatedajaxunion-basedblind-sqlihttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54597-itflow-blind-sqli-expires/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-54597-itflow-blind-sqli-expires/High severity — web · CVE-2026-54597. Status: Weaponized. Affects: ITFlow (open-source MSP/IT management platform). Tags: itflow, sql-injection, blind-sqli, time-based, authenticated, cwe-89.webHighitflowsql-injectionblind-sqlitime-basedauthenticatedcwe-89https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26980-ghost-cms-blind-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26980-ghost-cms-blind-sqli/Critical severity — web · CVE-2026-26980. Status: Weaponized. Affects: Ghost CMS. Tags: ghost-cms, sql-injection, blind-sqli, content-api, unauthenticated, boolean-oracle, mysql, sqlite.webCriticalghost-cmssql-injectionblind-sqlicontent-apiunauthenticatedboolean-oraclemysqlsqlite