10440 matches found
📄 CMS Academy Booking 1.0 SQL Injection
CMS Academy Booking version 1.0 suffers from a remote SQL injection vulnerability. ================================================================================================================================== | Title : CMS academy booking v1.0 sql injection vulnerability | | Author : indoush...
PT-2026-50816
Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 1.0 through 9.15 Description An issue exists in the named restore point endpoint 'POST /browser/server/restore point/gid/sid' where the user-supplied value field is interpolated directly into the SQL string using str.format...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the EmbeddingSearchRequest.filter process. An attacker can access sensitive data, modify or delete database records, or cause denial of service by injecting crafted input into metadata filter keys or values, which are...
EUVD-2025-210250
Unauthenticated SQL Injection in Advanced Ads – Tracking 3.0.7 versions...
EUVD-2026-37630
Subscriber SQL Injection in Cornerstone 7.8.8 versions...
EUVD-2026-37621
Unauthenticated SQL Injection in JetEngine 3.8.9.1 versions...
EUVD-2026-37612
Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...
EUVD-2026-37611
Unauthenticated SQL Injection in JetSmartFilters = 3.8.1 versions...
EUVD-2026-37742
Dell PowerFlex Manager, versions Versions, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to information disclosure...
CVE-2026-54818
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection. This issue affects Slimstat Analytics: from n/a through 5.4.11...
CVE-2026-54819
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Webilia Inc. Listdom allows Blind SQL Injection. This issue affects Listdom: from n/a through 5.4.0...
EUVD-2026-37714
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue affects GIFT4U: from n/a through 1.0.10...
CVE-2026-54809 WordPress GIFT4U plugin <= 1.0.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue affects GIFT4U: from n/a through 1.0.10...
CVE-2026-49079
Unauthenticated SQL Injection in JetSearch = 3.5.17 versions...
CVE-2026-48967
Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...
CVE-2026-22340
Unauthenticated SQL Injection in WPJobster = 6.3.5 versions...
CVE-2025-59554
The CVE-2025-59554 entry identifies an unauthenticated SQL injection in the WordPress plugin WordPress Advanced Ads – Tracking for versions before 3.0.7. Affected component: Tracking functionality within the Advanced Ads – Tracking plugin. Root cause: improper handling of input in the tracking fe...
CVE-2025-59554 WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Advanced Ads – Tracking 3.0.7 versions...