EUVD-2025-198233

i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/funcionariovinculocad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands...

CVE-2025-13395 codehub666 94list function.php login sql injection

A security flaw has been discovered in codehub666 94list up to 5831c8240e99a72b7d3508c79ef46ae4b96befe8. The impacted element is the function Login of the file /function.php. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the publi...

Restoran 安全漏洞

Restoran is a restaurant management system by Cybersecurity by hackerwhale individual developer. Restoran v1.0 has a security vulnerability that stems from a SQL injection on the contact form page...

PT-2025-47475

Name of the Vulnerable Software and Affected Versions i-Educar versions prior to 2.10.0 Description i-Educar is school management software with a flaw that allows an authenticated attacker to execute arbitrary SQL commands against the application's database. This is due to a time-based SQL...

PT-2025-47464

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

94list SQL注入漏洞

94list is a Baidu.com sharing link analyzer software by codehub666 individual developer. 94list has a SQL injection vulnerability, the vulnerability stems from improper manipulation of the parameters of the function Login in the file /function.php, which may lead to SQL injection attacks...

PT-2025-47451

Name of the Vulnerable Software and Affected Versions codehub666 94list affected versions not specified Description A security flaw exists in codehub666 94list. The issue involves a SQL injection impacting the Login function within the /function.php file. This allows for remote exploitation. The...

CVE-2025-63878

The CVE-2025-63878 entry concerns Github Restaurant Website Restoran v1.0 with a SQL injection vulnerability exposed through the Contact Form page. The connected documents reiterate the same description and provide no concrete technical specifics beyond the vulnerability class (SQLi) and page vec...

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

CampCodes Retro Basketball Shoes Online Store SQL注入漏洞

CampCodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from CampCodes, Inc. A SQL injection vulnerability exists in CampCodes Retro Basketball Shoes Online Store version 1.0, which stems from incorrect manipulation of the parameter tid in the file...

PT-2025-47536

Name of the Vulnerable Software and Affected Versions Campcodes Online Hospital Management System version 1.0 Description The Campcodes Online Hospital Management System version 1.0 is susceptible to SQL Injection. This issue affects the admin panel and specifically occurs through the username...

SQL Injection

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to SQL Injection via the hostname parameter in the ajaxoutput.php endpoint. An attacker can access sensitive information...

CVE-2025-13298

A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now publ...

CVE-2025-63694

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage...

CVE-2025-58692

Fortinet FortiVoice is affected by an SQL injection vulnerability (CWE-89) across FortiVoice 7.0.0–7.0.7 and 7.2.0–7.2.2. The issue arises from improper neutralization of special elements in SQL commands, enabling an authenticated attacker to execute unauthorized code or commands via crafted HTTP...

EUVD-2025-198019

An improper neutralization of special elements used in an SQL Command "SQL Injection" vulnerability CWE-89 in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS...

CVE-2025-9977

CVE-2025-9977 affects Times Software E-Payroll. The issue stems from improper sanitization of data in a POST parameter during login, which could let an unauthenticated attacker cause a DoS and may enable SQL injection; command injection attempts have also produced detailed error messages exposing...

CVE-2025-13346

CVE-2025-13346 affects SourceCodester Train Station Ticketing System v1.0. The vulnerability is in /ajax.php?action=save_station where manipulating id/station enables SQL injection. Reported as exploitable remotely with a public exploit; CVSS data indicate high/confidentiality/ integrity/availabi...

CVE-2025-13344

CVE-2025-13344 affects SourceCodester Train Station Ticketing System 1.0. The vulnerability is a SQL injection in the /ajax.php?action=login handler, triggered by manipulating the Username parameter, with remote access and a public exploit. Impact is reported as high/critical on confidentiality, ...

CVE-2025-41348 Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by sendng a POST request using the parameters 'val1' and 'cont in '/WinplusPortal/ws/sWinplus.svc/json/getacumperpost'...