CVE-2026-105383 onetwothreeneth HospitalManagementSystem controller.php sql injection

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

CVE-2026-105383

A SQL injection vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d). The flaw is located in an unknown function within the php/controller.php file, where the manipulation of the transaction_idS argument allows for remote exe...

CVE-2026-105383 onetwothreeneth HospitalManagementSystem controller.php sql injection

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

EUVD-2026-92494

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Aydan Arabadzha in WordPress Plugin SendPress Newsletters versions = 1.26.1.20...

WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Coopernicus in WordPress Plugin Gmedia Photo Gallery versions = 1.25.1...

WordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin Buddyboss Platform versions = 3.1.0...

WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Pedro "TheZakMan" Araujo in WordPress Plugin Radius Booking — Booking Calendar for Appointments & Services versions = 1.0.19...

CVE-2026-88397

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-102428

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...

WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ARMember Premium versions = 7.8...

WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin UDesign Core versions = 4.15.0...

WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ListingPro versions = 2.9.12...

WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability

WordPress Porto Theme - Functionality plugin = 3.9.3 - SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Porto Theme - Functionality versions = 3.9.3...

EUVD-2026-92449

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...

CVE-2026-102428

The OrdaSoft Joomla CCK extension (versions

CVE-2026-102428 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...

CVE-2026-102428 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...

WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dzeusking in WordPress Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email versions = 1.5.9...