CVE-2026-112090

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

EUVD-2026-104108

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112090

A SQL injection vulnerability exists in the Dav-ee dairy-management-system (commit 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d). The flaw originates from the mysqli_real_escape_string function within the payment/pay.php file, where improper handling of the f_...

CVE-2026-112090 Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

PT-2026-117258

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqli real escape string of the file payment/pay.php. The manipulation of the argument f no/farmer results in sql...

CVE-2026-112090: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘fno/farmer’ in the ‘payment/pay.php’ file using the ‘mysqlirealescapestring’ function. It may lead to SQL injection attacks, and attackers could exploit this...

CVE-2026-14769 code-projects Real State Services pay.php sql injection

A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly...

PT-2026-55821

Name of the Vulnerable Software and Affected Versions code-projects Real State Services version 1.0 Description Remote SQL injection is possible due to improper processing of the Bankname variable within the '/pay.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL...

CVE-2026-14769: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly...

CVE-2026-5645

A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely...

PT-2026-30595

Name of the Vulnerable Software and Affected Versions projectworlds Car Rental System version 1.0 Description A weakness exists in projectworlds Car Rental System 1.0. The issue affects an unknown functionality within the /pay.php file of the Parameter Handler component. Manipulation of the mpesa...

CVE-2026-5645: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely...

EUVD-2021-13526

Malware in sbrugna...

CVE-2025-7475 code-projects Simple Car Rental System pay.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-7475 code-projects Simple Car Rental System pay.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-7475

CVE-2025-7475 affects Simple Car Rental System 1.0, with the vulnerability located in /pay.php where manipulating the mpesa parameter enables SQL injection. The issue is exploitable remotely and exploitation details have been disclosed publicly. Multiple connected sources confirm a critical impac...

CVE-2025-7475: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...