272559 matches found
CVE-2026-90902 Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task administrator/index.php?option=comeasystore&task=coupon.couponBulkUpdate took input IDs and directly concatenated them into raw SQL I...
CVE-2026-90902
The Joomla Extension - joomshaper.com - Easy Store (versions 1.0.0-3.0.0 ) is vulnerable to an Authenticated, Privileged SQL Injection within the coupon bulk update task. The flaw exists because input IDs in ProductCoupon.php and CouponsModel.php are directly concatenated into raw SQL IN (...) cl...
CVE-2026-90902 Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task administrator/index.php?option=comeasystore&task=coupon.couponBulkUpdate took input IDs and directly concatenated them into raw SQL I...
EUVD-2026-85552
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task administrator/index.php?option=comeasystore&task=coupon.couponBulkUpdate took input IDs and directly concatenated them into raw SQL I...
SQL Injection
Overview sulu/sulu is a highly extensible open-source PHP content management system based on the Symfony framework. Affected versions of this package are vulnerable to SQL Injection via the categories query parameter in the Smart Content category filter. An attacker can infer the existence of, an...
CVE-2026-92692
The Sulu PHP content management system (affected versions 2.6 and 3.0 prior to 2.6.25 and 3.0.8 ) is vulnerable to an unauthenticated JCR-SQL2 injection . The flaw exists in the Smart Content QueryBuilder at src/Sulu/Component/Content/SmartContent/QueryBuilder.php because category identifiers fro...
USN-8808-1: SQL parse vulnerabilities
It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of...
EUVD-2026-85504
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95601 WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95601 WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Product Filter by WBW = 3.1.7 versions...
CVE-2026-95601
The Product Filter by WBW WordPress plugin (versions
CVE-2026-95593
The Ultimeter WordPress plugin versions
CVE-2026-95593 WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
Editor SQL Injection in Ultimeter = 3.0.8 versions...
CVE-2026-95593 WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
Editor SQL Injection in Ultimeter = 3.0.8 versions...
EUVD-2026-85502
Editor SQL Injection in Ultimeter = 3.0.8 versions...
CVE-2026-95590
The Tainacan WordPress plugin (versions
EUVD-2026-85500
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
CVE-2026-95590 WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability
Subscriber SQL Injection in Tainacan = 1.2.0 versions...