PT-2026-95997

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant Management System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description Remote SQL injection is possible through the manipulation of the table/members/price argument. This issue occurs within the mysqli...

PT-2026-90940

🚨 CVE-2020-15875 An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax table.php API endpoint. This affects as-selection.inc.php,...

PT-2026-84284

A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf dump table.php. This manipulation of the argument gblOrgID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendo...

PT-2026-82226

Name of the Vulnerable Software and Affected Versions LibreNMS version 1.65 Description A remote authenticated attacker with normal privileges can extract all information from the database via a SQL injection. This occurs through the sort parameter in the '/ajax table.php' API endpoint. The issue...

PT-2026-82227

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajax table.php API endpoint...

CVE-2026-4241: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of the argument coursecode leads to sql injection. The attack can be launched remotely. The exploit is publicly available...

CVE-2025-9885: Cross-Site Request Forgery (CSRF)

The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for...

CVE-2025-6122 code-projects Restaurant Order System table.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-6122: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-5973 PHPGurukul Restaurant Table Booking System add-table.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-table.php. The manipulation of the argument tableno leads to cross site scripting. The attack can be launched...

CVE-2025-5973: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-table.php. The manipulation of the argument tableno leads to cross site scripting. The attack can be launched...

PT-2025-9584

Name of the Vulnerable Software and Affected Versions PHPGurukul Restaurant Table Booking System version 1.0 Description A critical issue was found in the system, affecting an unknown functionality of the file /add-table.php. The manipulation of the tableno argument leads to SQL injection. This...

CVE-2025-1900: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /add-table.php. The manipulation of the argument tableno leads to sql injection. The attack may be launched remotely. The exploi...

CVE-2024-13682: Cross-Site Request Forgery (CSRF)

The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation in...

PT-2025-9643

Name of the Vulnerable Software and Affected Versions The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress versions up to, and including, 2.6.2 Description The issue is related to Cross-Site Request Forgery due to missing o...

PT-2024-35073

Name of the Vulnerable Software and Affected Versions Arris VAP2500 version 08.50 Description A critical issue has been found in the Arris VAP2500, affecting an unknown functionality of the file /assoc table.php. The manipulation of the id argument leads to command injection. This issue can be...

CVE-2024-0847: Cross-Site Request Forgery (CSRF)

The 5280 Bootstrap Modal Contact Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation in class-sbmm-list-table.php. This makes it possible for unauthenticated attackers to bulk delete...

Cross site scripting

The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the /admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to...

PT-2021-23597

Name of the Vulnerable Software and Affected Versions Asgaros Forums WordPress plugin versions up to and including 1.15.13 Description The issue is related to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the /admin/tables/admin-structure-table.php file...

CVE-2021-42365: Improper Neutralization of Input During Web Page Generation

The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the /admin/tables/admin-structure-table.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to...