EUVD-2022-31663

Malicious code in bioql PyPI...

EUVD-2025-20787

Malicious code in bioql PyPI...

EUVD-2022-49730

Malicious code in bioql PyPI...

EUVD-2022-49734

Malicious code in bioql PyPI...

SQL Injection Vulnerability in Grocery Sales and Inventory System

Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/ajax.php. Attackers can exploit this...

CVE-2025-10851: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released ...

CVE-2025-10786: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

CVE-2025-10790: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=savecategory. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38231)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletereceiving...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38228)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=deleteproduct. Attackers c...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38229)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=deletesupplier. Attackers...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38232)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the parameter ID of the...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38230)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the parameter ID in the...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38233)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=saveproduct...

CVE-2025-10564: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deletecategory. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10565: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

CVE-2025-10563: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=savecategory. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38235)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletecustomer...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38237)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savesupplier. Attackers ca...

CVE-2025-10562: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...