CVE-2023-41521

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

CVE-2023-41520

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

CVE-2023-41531

The Hospital Management System v4 , developed by Kishan Lal, contains multiple SQL injection vulnerabilities in the func3.php file. The root cause is the incorrect manipulation and lack of proper sanitization of the username1 and password2 parameters. Exploitation of these vulnerabilities could a...

PT-2025-32289 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createSessionTerm.php file. These flaws are present through the id, termId, and...

PT-2025-32290 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...

PT-2025-32300 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters...

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41522

The Student Attendance Management System v1 is vulnerable to multiple SQL injection flaws located in the createStudents.php file. The root cause is the incorrect manipulation and lack of sanitization for the Id , firstname , and admissionNumber parameters. These vulnerabilities could allow an att...

CVE-2023-41521

Student Attendance Management System v1 contains multiple SQL injection vulnerabilities located in the createSessionTerm.php file. The root cause is the incorrect manipulation and lack of sanitization of the id, termId, and sessionName parameters. Successful exploitation could allow an attacker t...

CVE-2023-41528

Hospital Management System v4 is susceptible to multiple SQL injection vulnerabilities located in the contact.php file. The root cause is the incorrect manipulation and lack of proper sanitization of the txtname , txtphone , and txtmail parameters. An attacker could exploit these flaws to execute...

WordPress SQLsplorer Challenge: Bigger Scope and Bounties for All Researchers in the Wordfence Bug Bounty Program

From now through September 22, 2025 , we’re running our SQLsplorer Challenge , focused on SQL Injection vulnerabilities. During this challenge, we’re expanding the scope of the Wordfence Bug Bounty Program to encourage deeper research into SQL Injection vulnerabilities and broader participation...

CVE-2025-24290

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application Version 2.4.206 and earlier could allow a malicious actor with low privileges to escalate privileges...

CVE-2025-24290

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application Version 2.4.206 and earlier could allow a malicious actor with low privileges to escalate privileges...

Code Injection Vulnerabilities in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications...

CVE-2025-45987

Several LB-LINK (Blink) routers are vulnerable to command injection due to a lack of data cleaning measures when processing the dns1 and dns2 parameters in the bs_SetDNSInfo function of the libshare-0.0.26.so library. Affected products include BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4 , BL-X10_AC8 ...

CVE-2025-45988

Several LB-LINK (Blink) routers are vulnerable to command injection due to a failure to implement proper data cleaning measures when processing the cmd parameter in the bs_SetCmd function within the libshare-0.0.26.so library. Affected products and versions include BL-WR9000 V2.4.9 , BL-AC2100_AZ...

CVE-2025-45988

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...