CVE-2026-105776: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-42415: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2025-45871

LogicalDOC Enterprise, version 9.1.1 and below , is vulnerable to a blind SQL injection within the WorkflowsDataServlet component. This flaw allows an authenticated user to manipulate SQL queries by providing a crafted workflow template name . The impact involves unauthorized data access or manip...

CVE-2026-105921: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105920: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105919: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105807: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Woffice = 5.4.35 versions...

CVE-2026-39746: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-32581: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...

CVE-2026-32580: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

CVE-2026-25434: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

CVE-2026-42417: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...

CVE-2026-42416: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-41555: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-39795: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

CVE-2026-39764: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

CVE-2025-45871: Improper Neutralization of Special Elements used in an SQL Command

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-79798: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-105471: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...