10194 matches found
Weiphp WeiPHP 安全漏洞
Weiphp WeiPHP is a WeChat development platform that supports the development of public numbers and small programs from Shenzhen Yuanmeng Yun Weiphp Company in China. A security vulnerability exists in Weiphp WeiPHP v5.0 and earlier versions, which originates from a SQL injection in the...
CampCodes Online Loan Management System SQL注入漏洞
CampCodes Online Loan Management System is an online loan management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in Campcodes Online Loan Management System version 1.0, which stems from an incorrect manipulation of a parameter ID resulting in SQL injection...
CVE-2025-58780
index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately describes the vulnerability."...
CVE-2025-41034
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-static-pages/create/...
CVE-2025-10030 Campcodes Grocery Sales and Inventory System ajax.php sql injection
A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10046
The ELEX WooCommerce Google Shopping Google Product Feed plugin for WordPress is vulnerable to SQL Injection via the 'filetodelete' parameter in all versions up to, and including, 1.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...
CVE-2025-10003
CVE-2025-10003 affects the WordPress plugin UsersWP – Front-end login form, User Registration, User Profile & Members Directory up to version 1.2.44 . The vulnerability is a time-based SQL Injection caused by insufficient escaping of the htmlvar parameter in the plugin’s upload_file_remove functi...
CVE-2025-58439 ERP: Possibility of SQL injection due to missing validation
ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions...
CVE-2025-58439 ERP: Possibility of SQL injection due to missing validation
ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions...
ERPNext SQL注入漏洞
ERPNext is an open source enterprise resource planning solution from ERPNext India. A SQL injection vulnerability exists in ERPNext versions prior to 14.89.2 and 15.0.0 through 15.75.1, which stems from insufficient parameter validation and could lead to SQL injection attacks...
PT-2025-36366
Name of the Vulnerable Software and Affected Versions: ELEX WooCommerce Google Shopping plugin for WordPress versions up to and including 1.4.3 Description: The ELEX WooCommerce Google Shopping plugin for WordPress is susceptible to SQL Injection through the file to delete parameter. Insufficient...
CampCodes Grocery Sales and Inventory System SQL注入漏洞
CampCodes Grocery Sales and Inventory System is a grocery sales and inventory system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Grocery Sales and Inventory System version 1.0, which stems from an incorrect manipulation of a parameter ID resulting in a SQL...
Linux Distros Unpatched Vulnerability : CVE-2025-57833
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases,...
CVE-2025-9927
A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such manipulation of the argument t1 leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might...
CVE-2025-10025
The CVE-2025-10025 entry applies to PHPGurukul Online Course Registration 3.1. Affected is an unknown function in /admin/semester.php where manipulating the semester parameter yields SQL injection. The exploit has been publicly disclosed and is usable remotely, with PoC-level maturity noted in so...
CVE-2025-10025 PHPGurukul Online Course Registration semester.php sql injection
A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-58628
CVE-2025-58628 refers to a SQL injection vulnerability in the WordPress theme Miraculous (versions before 2.0.9). The issue is caused by improper neutralization of special elements in SQL commands, enabling blind SQL injection. Public writeups and vulnerability feeds confirm affected software as ...
CVE-2025-58789
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows SQL Injection.This issue affects WP Full Stripe Free: from n/a through = 8.2.5...
CVE-2025-10011 Portabilis i-Educar edit sql injection
A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made availabl...