Time-Based-Blind — PoC Archivehttps://poc.intelseclab.com/tags/time-based-blind/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000WP Photo Album Plus Unauthenticated SQL Injection — CVE-2026-6379https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6379-wp-photo-album-plus-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6379-wp-photo-album-plus-sqli/Critical severity (CVSS 8.6) — web · CVE-2026-6379. Status: PoC. Affects: WordPress plugin "WP Photo Album Plus" (WPPA+) by opajaap. Tags: wordpress, wp-photo-album-plus, sql-injection, unauthenticated, time-based-blind, cwe-89.webCriticalwordpresswp-photo-album-plussql-injectionunauthenticatedtime-based-blindcwe-89OpenSTAManager Global Search Amplified Time-Based Blind SQL Injection — CVE-2026-24417https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24417-openstamanager-sqli-search-dos/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24417-openstamanager-sqli-search-dos/High severity — web · CVE-2026-24417. Status: PoC. Affects: OpenSTAManager (devcode-it/openstamanager). Tags: sql-injection, time-based-blind, openstamanager, php, denial-of-service, ajax, authenticated.webHighsql-injectiontime-based-blindopenstamanagerphpdenial-of-serviceajaxauthenticatedOpenSTAManager Article Pricing Time-Based Blind SQL Injection — CVE-2026-24416https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24416-openstamanager-sqli-article-pricing/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24416-openstamanager-sqli-article-pricing/High severity — web · CVE-2026-24416. Status: PoC. Affects: OpenSTAManager (devcode-it/openstamanager). Tags: sql-injection, time-based-blind, openstamanager, php, ajax, credential-theft, authenticated.webHighsql-injectiontime-based-blindopenstamanagerphpajaxcredential-theftauthenticatedBusiness Directory Plugin for WordPress — Unauthenticated Time-Based Blind SQL Injection (CVE-2026-2576)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-2576-business-directory-plugin-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-2576-business-directory-plugin-sqli/High severity (CVSS 7.5) — web · CVE-2026-2576. Status: Weaponized. Affects: Business Directory Plugin (Easy Listing Directories) for WordPress. Tags: wordpress, sqli, time-based-blind, business-directory-plugin, unauthenticated, cwe-89, wpdb, docker-lab.webHighwordpresssqlitime-based-blindbusiness-directory-pluginunauthenticatedcwe-89wpdbdocker-lab