284531 matches found
CVE-2026-88397: Improper Neutralization of Special Elements used in an SQL Command
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
Important: mariadb-connector-c security update
The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...
Important: mariadb-connector-c security update
The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...
PT-2026-106075
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
PT-2026-106261
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqli query of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...
PT-2026-106169
Name of the Vulnerable Software and Affected Versions WP BASE Booking versions prior to 6.4.1 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database tr...
CVE-2026-88395
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
moosocial Social-Commerce 3.2.4 SQL Injection
moosocial Social-Commerce version 3.2.4 suffers from a remote SQL injection vulnerability. Exploit Title: moosocial Social-Commerce 3.2.4 - SQL Injection time-based blind Exploit Author: CraCkEr Date: 26/08/2026 Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link:...
PT-2026-106059
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transaction details.php. Executing a manipulation of the argument transaction id can lead to sql...
CVE-2026-63270: Exposure of Sensitive Information to an Unauthorized Actor
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...
PT-2026-104661
A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...
PT-2026-104714
A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...
EUVD-2026-92704
FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...
CVE-2026-105169: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...
CVE-2026-105385: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
PT-2026-104817
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Opening a document containing specially crafted links allows the construction of URLs that expand environment variable or INI file values. This can lead to the...
CVE-2026-88397
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
CVE-2026-88397
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
PT-2026-106176
Name of the Vulnerable Software and Affected Versions feelec-yishu feelcrm-os version 1.0.0 Description A remote SQL injection exists in the Member Endpoint component. The issue occurs within the index function of the file App/Feelcrm/Index/Controller/MemberController.class.php when the group id...