282325 matches found
CVE-2026-18180: Improper Neutralization of Special Elements used in an SQL Command
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...
Fedora 45 : postgresql16-anonymizer (2026-bc7408de42)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bc7408de42 advisory. Upstream changelog: https://gitlab.com/dalibo/postgresqlanonymizer/-/releases - core CVE-2026-19633: Escalation via custom types, operators and...
PT-2026-97513
Name of the Vulnerable Software and Affected Versions Easy Store versions 1.0.0 through 3.0.0 Description Two distinct issues exist in the extension. First, the endpoint 'administrator/index.php?option=com easystore&task=media.deleteImage' fails to properly sanitize the ids parameter, which is...
PT-2026-97125
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the test id argument within an unknown function in the '/reviewer 0/admins/assessments/pretest/btn...
PT-2026-97118
Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Search Form component within the file admin/display menu.php. A remote attacker can trigger a SQL injection ...
PT-2026-97445
Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...
PT-2026-97485
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
PT-2026-97624
Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...
PT-2026-97126
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection exists in the file /reviewer 0/admins/assessments/pretest/exam-delete.php. This issue occurs when the test id argument is manipulated, allowing an...
CVE-2026-95593: Improper Neutralization of Special Elements used in an SQL Command
Editor SQL Injection in Ultimeter = 3.0.8 versions...
CVE-2026-95590: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Tainacan = 1.2.0 versions...
CVE-2026-93773: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Mollie Forms = 2.11.0 versions...
CVE-2026-93527: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Live Copy Paste for Elementor = 1.5.10 versions...
CVE-2026-90902: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task administrator/index.php?option=comeasystore&task=coupon.couponBulkUpdate took input IDs and directly concatenated them into raw SQL I...
CVE-2026-90901: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media deletion endpoint administrator/index.php?option=comeasystore&task=media.deleteImage parsed the ids parameter as a comma-separated string and implode...
CVE-2026-14913: Improper Neutralization of Special Elements used in an SQL Command
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports...
CVE-2026-95929: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml of the component getBotList API endpoint. Executing a manipulation of the argument sortDirection can lead to sq...
CVE-2026-95868: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqliquery of the file admin/displaymenu.php of the component Search Form. This manipulation of the argument s1 causes sql injectio...
CVE-2026-96602: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...
