PT-2026-65922

Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, via the /save user.php endpoint throug...

CVE-2025-67403

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

CVE-2026-11973: Improper Neutralization of Special Elements used in an SQL Command

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

PT-2026-65686

The WP Photo Album Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'table' parameter in all versions up to, and including, 9.2.04.002 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

SMB Client Heap Buffer Overflow DoS

The vulnerability of the smb3fscontextParseParam function in the fs/smb/client/fsContext.c module, which is part of the SMB client support in Linux operating systems, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker...

PT-2026-65921

Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0 Description An issue exists in the 'update student.php' endpoint where improper handling of the fname and student class parameters allows for SQL Injection. SQL Injection is a...

CVE-2025-67404

The Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection within the save_stud.php component. The root cause is the improper neutralization of special elements used in an SQL command via the fname , lname , and student_class parameters. This vulnerability allows an a...

CVE-2025-69943

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection within the get_doctor.php file. The vulnerability is triggered via the doctor and specilizationid parameters. This flaw allows for the improper neutralization of special elements used in an SQL command, potentially leadi...

CVE-2025-69943

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2025-67408

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...

CVE-2025-69943

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

CVE-2025-67404

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

CVE-2025-67403

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

PT-2026-65913

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description SQL Injection occurs in the 'get doctor.php' endpoint through the doctor and specilizationid parameters. SQL Injection is a technique where malicious SQL statements are inserted int...

PT-2026-65918

Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0 Description An issue exists in the 'save stud.php' endpoint where improper handling of the fname, lname, and student class parameters allows for SQL Injection. SQL Injection is a...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2026-15344: Improper Neutralization of Special Elements used in an SQL Command

The WP Photo Album Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'table' parameter in all versions up to, and including, 9.2.04.002 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-69944

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection within the view-medhistory.php endpoint. The vulnerability is triggered via the viewid parameter, allowing for the improper neutralization of special elements used in an SQL command. Exploitation details are not provided...