261612 matches found
PT-2026-106406
Name of the Vulnerable Software and Affected Versions WooCommerce Lottery versions prior to 2.3.0 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...
PT-2026-106389
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
PT-2026-106436
Name of the Vulnerable Software and Affected Versions Radius Booking — Booking Calendar for Appointments & Services versions prior to 1.0.20 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the...
PT-2026-106420
Name of the Vulnerable Software and Affected Versions Booknetic versions prior to 4.8.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...
PT-2026-106758
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search class.php. Such manipulation of the argument school year leads to sql injection. The attack may be launched remotely. The...
PT-2026-107144
Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...
PT-2026-106820
Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise versions prior to 9.1.2 Description An authenticated user can manipulate SQL queries through a crafted workflow template name in the WorkflowsDataServlet component. This leads to a blind SQL injection, a technique used to...
WP < 7.1.3 - Author+ SQLi via WXR Export
Description WordPress does not properly validate some post meta values before using them in a database query when exporting content in some cases, which could allow users with Author-level access and above to store a crafted value that results in SQL injection executed when an administrator later...
PT-2026-106421
Name of the Vulnerable Software and Affected Versions Woffice versions prior to 5.4.36 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the database queries. Recommendations Update to a version newer than 5.4.35...
CVE-2026-105845: Improper Neutralization of Special Elements used in an SQL Command
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...
PT-2026-106789
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload versions prior to 4.0.0-canary.34 Payload Postgres packages versions prior to 3.73.0 Description An attacker with read and create or update access to a collection containing a json field or a blocks fie...
CVE-2026-105921: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...
CVE-2026-105920: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...
CVE-2026-105919: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...
CVE-2026-105807: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...
CVE-2026-105776: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Woffice = 5.4.35 versions...
CVE-2026-39746: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...