CVE-2025-45871: Improper Neutralization of Special Elements used in an SQL Command

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-105957: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-79798: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-76754: Improper Neutralization of Special Elements used in a Command

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-79811: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary...

CVE-2026-79794: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

PT-2026-106407

Name of the Vulnerable Software and Affected Versions Mooberry Book Manager version 4.16.2 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the application's database queries. Recommendations At the moment, there is no information about...

PT-2026-106453

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

PT-2026-106395

Name of the Vulnerable Software and Affected Versions WooCommerce Appointments versions prior to 5.3.3 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to i...

PT-2026-106475

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

PT-2026-106363

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

PT-2026-107193

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An unauthenticated remote attacker can perform SQL injection attacks against an affected interface of ClearPass Policy Manager. SQL injection is a technique where malicious S...

PT-2026-107194

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the web-based management interface of ClearPass Policy Manager. This issue allows an authenticated remote attacker to execute arbitrary databas...

PT-2026-106335

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin transaction.php. This manipulation of the argument Username causes sql...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

EUVD-2025-211038

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

PT-2026-106777

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An untrusted user can trigger SQL injection in the SQLite and Postgres adapters by submitting requests that query readable collections...

PT-2026-106467

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

RockyLinux 9 : mariadb-connector-c (RLSA-2026:75673)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75673 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted...

PT-2026-106728

Name of the Vulnerable Software and Affected Versions Kusalkasilva Learning-Management-System versions up to ffeb873f8803f1e9664384ff75000c7da45466d2 Description A remote SQL injection exists within the Student Registration Endpoint component, specifically affecting an unknown function in the...