284754 matches found
CVE-2026-90789
A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...
CVE-2026-7848
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...
CVE-2026-15600
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...
SQL Injection
Overview org.apache.syncope.core:syncope-core-persistence-jpa is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to SQL Injection via the...
CVE-2026-90789 itsourcecode Leave Management System login.php sql injection
A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...
CVE-2026-90789 itsourcecode Leave Management System login.php sql injection
A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...
EUVD-2026-77526
A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...
CVE-2026-90789
itsourcecode Leave Management System 1.0 is affected by a SQL injection vulnerability in /login.php . By manipulating the user_email parameter, an unauthenticated remote attacker can inject SQL commands. The CVSS 3.1 score is 7.3 (HIGH) with low impact on confidentiality, integrity, and availabil...
CVE-2026-15600 SQL Injection in Alior Bank raty PrestaShop module
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...
CVE-2026-15600
The Alior Bank PrestaShop module "raty" for commercial partners is affected by a SQL Injection in the toggleCategoryPromotionAction method. The root cause is the unsanitized insertion of the POST parameter "status" into SQL UPDATE queries without validation. An attacker who already has access to ...
EUVD-2026-77519
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...
CVE-2026-15600 SQL Injection in Alior Bank raty PrestaShop module
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...
CVE-2026-7848 SQL Injection in Alior Bank raty PrestaShop module
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...
EUVD-2026-77518
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...
CVE-2026-7848
The Alior Bank "raty" PrestaShop module for commercial partners is vulnerable to SQL Injection in three hook methods (hookActionObjectProductUpdateBefore, hookActionObjectCategoryUpdateBefore, and hookActionObjectCategoryAddAfter). The module inserts the POST parameters alior_product_promotion, a...
CVE-2026-7848 SQL Injection in Alior Bank raty PrestaShop module
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...
CVE-2026-77051
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...
Framework
🔒 Pentest Framework !Pythonhttps://img.shields.io/badge/Py...
CVE-2026-77051 Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...
CVE-2026-77051
Apache Syncope is vulnerable to an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. An administrator with adequate entitlements can execute arbitrary SQL via stacked queries by leveraging unsanitized entityKey and opEvent parameters. This issue ...