925 matches found
CVE-2016-15050: Improper Neutralization of Special Elements used in an SQL Command
Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters were incorporated into SQL statements without adequate parameterization or sanitation, allowing an authenticated user to manipulate database queries...
CVE-2025-12293 SourceCodester Point of Sales category.php sql injection
A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...
CVE-2025-60783
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings...
CVE-2025-60783
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings...
CVE-2025-60783
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings...
CVE-2025-60783: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings...
CVE-2025-60783
The Restaurant Management System DBMS Project v1.0 contains a SQL injection vulnerability within the login.php component. The root cause is the improper handling of SQL query strings , which allows an attacker to manipulate the application's database using specially crafted queries. The affected ...
CVE-2025-11372 LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to modification of data in all versions up to, and including, 4.2.9.2. This is due to missing capability checks on the Admin Tools REST endpoints which are registered with permissioncallback set to returntrue. This makes it...
CVE-2025-41018
SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in '/public.php'...
EUVD-2025-34734
SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticketdetail'...
CVE-2025-41018: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in '/public.php'...
PT-2025-42434
Name of the Vulnerable Software and Affected Versions Sergestec SISTICK version 7.2 Description A SQL injection issue exists in Sergestec's SISTICK version 7.2. This allows an attacker to retrieve, create, update, and delete databases. The issue is located in the 'id' parameter within the...
PT-2025-42433
Name of the Vulnerable Software and Affected Versions Sergestec Exito version 8.0 Description A SQL injection issue exists in Sergestec Exito version 8.0. This allows an attacker to retrieve, create, update, and delete databases. The vulnerability is present in the 'cat' parameter of the...
PT-2025-41244
Name of the Vulnerable Software and Affected Versions Melis platform affected versions not specified Description A SQL injection issue exists in the melis-cms module of the Melis platform. This allows an attacker to retrieve, create, update, and delete databases. The vulnerability is located in t...
EUVD-2009-3244
Malware in sbrugna...
EUVD-2019-14278
Malware in sbrugna...
EUVD-2019-9333
Malware in sbrugna...
EUVD-2008-5306
Malware in sbrugna...