EUVD-2026-85776

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely...

CVE-2026-96803 java110 MicroCommunity fallBack API Endpoint BusinessApi.java QueryServiceSMOImpl.fallBack sql injection

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely...

CVE-2026-96803

A SQL injection vulnerability exists in java110 MicroCommunity up to version 2.0 . The flaw is located within the QueryServiceSMOImpl.fallBack function of the BusinessApi.java file, specifically affecting the fallBack API Endpoint component. An attacker can exploit this by manipulating the fallBa...

CVE-2026-96803 java110 MicroCommunity fallBack API Endpoint BusinessApi.java QueryServiceSMOImpl.fallBack sql injection

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely...

CVE-2026-96777 Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-96777 Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

EUVD-2026-85778

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-96777

A SQL injection vulnerability exists in Forma LMS versions up to 4.1.43 . The flaw is located in the Multi-User-Selector AJAX Endpoint , specifically within the UserselectorAdmController::getDataTask function of the file /appCore/ajax.adm_server.php?r=adm/userselector/getData. An attacker can ini...

Exploit for Interpretation Conflict in Wordpress

WP2Shell — CVE-2026-63030 + CVE-2026-60137 WordPress Core Pre-...

EUVD-2026-85749

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/addproject.php. Such manipulation of the argument connsettings leads to sql injection. The attack may be launched remotely. Th...

EUVD-2026-85674

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

EUVD-2026-85675

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...

EUVD-2026-85711

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...

CVE-2026-96751

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/addproject.php. Such manipulation of the argument connsettings leads to sql injection. The attack may be launched remotely. Th...

PT-2026-97732

Name of the Vulnerable Software and Affected Versions DIAEnergie versions prior to 1.11.00.022 Description SQL Injection in DIAEnergie. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database. Recommendations Update ...

CVE-2026-96803: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely...

CVE-2026-78309: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78311: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

PT-2026-98249

Name of the Vulnerable Software and Affected Versions YunaiV/zhijiantianya ruoyi-vue-pro versions prior to 2026.09 Description A remote SQL injection issue exists in the GoView Data Endpoint. The flaw is located in the getDataBySQL function within the GoViewDataServiceImpl.java file. An attacker...

PT-2026-97684

Name of the Vulnerable Software and Affected Versions java110 MicroCommunity versions prior to 2.1 Description Remote manipulation of the fallBackSql argument within the QueryServiceSMOImpl.fallBack function of the BusinessApi.java file in the fallBack API endpoint allows for SQL injection. SQL...