CVE-2019-25525

CVE-2019-25525 affects Inout EasyRooms Ultimate Edition v1.0. The vulnerability is an SQL injection in the guests parameter that can be exploited via POST to the search/rentals endpoint, enabling unauthenticated attackers to bypass authentication and potentially extract or modify data. The provid...

CVE-2019-25521

Summary: CVE-2019-25521 is an SQL injection vulnerability in the XooGallery Latest component that allows unauthenticated attackers to manipulate database queries via the gal_id parameter in gal.php. The issue is triggered by crafting malicious gal_id values in GET requests to extract sensitive da...

EUVD-2026-11525

A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patientaction.php. Such manipulation of the argument patientid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2026-3992

A weakness has been identified in CodeGenieApp serverless-express up to 4.17.1. This affects an unknown part of the file utils/dynamodb.ts of the component Users Endpoint. This manipulation of the argument filter causes injection. The attack may be initiated remotely. The exploit has been made...

CVE-2026-3992

CVE-2026-3992 affects CodeGenieApp serverless-express up to 4.17.1, targeting an unspecified area within utils/dynamodb.ts of the Users Endpoint. The issue arises from manipulation of the argument filter, causing an injection vulnerability that can be triggered remotely. Public exploit code is av...

Serverless Express 安全漏洞

Serverless Express is an open-source library from Code Genie that allows for running Node.js web applications in a serverless environment. Serverless Express versions 4.17.1 and earlier contain a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file...

Jettweb PHP Hazir Rent A Car Sitesi Scripti SQL注入漏洞

Jettweb PHP Hazır Rent A Car Sitesi Scripti is a car rental website system developed by the Turkish company Jettweb. The Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 version contains an SQL injection vulnerability. This vulnerability stems from the arackategoriid parameter, which allows for SQL...

Netartmedia Real Estate Portal SQL注入漏洞

Netartmedia Real Estate Portal is a real estate transaction website system operated by the Bulgarian company Netartmedia. Version 5.0 of Netartmedia Real Estate Portal has a SQL injection vulnerability. This vulnerability arises from injecting SQL code through the page parameter, which may allow...

Netartmedia PHP Dating Site SQL注入漏洞

Netartmedia PHP Dating Site is a dating website system operated by the Bulgarian company Netartmedia. The Netartmedia PHP Dating Site has a SQL injection vulnerability, which stems from SQL injections in email parameters. This vulnerability could allow unverified attackers to manipulate database...

itsourcecode Cafe Reservation System SQL注入漏洞

itsourcecode Cafe Reservation System is an open-source coffee reservation system developed by itsourcecode. Version 1.0 of the system has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the Username parameter in the /curvus2/signup.php file within the Registrati...

Netartmedia Deals Portal SQL注入漏洞

Netartmedia Deals Portal is a discount trading website system operated by the Bulgarian company Netartmedia. The Netartmedia Deals Portal has a SQL injection vulnerability, which stems from SQL injection attacks in email parameters. This vulnerability could allow unverified attackers to manipulat...

itsourcecode Online Doctor Appointment System SQL注入漏洞

itsourcecode Online Doctor Appointment System is an open-source online doctor appointment system developed by itsourcecode. Version 1.0 of the system has a SQL injection vulnerability, which stems from incorrect handling of the patientid parameter in the file admin/patientaction.php. This...

Nesote Inout EasyRooms SQL注入漏洞

Nesote Inout EasyRooms is a hotel management system developed by Nesote Corporation. Version 1.0 of Nesote Inout EasyRooms has a SQL injection vulnerability. This vulnerability stems from the numguest parameter, which allows for SQL injections, potentially enabling unverified attackers to...

Netartmedia Real Estate Portal SQL注入漏洞

Netartmedia Real Estate Portal is a real estate transaction website system operated by the Bulgarian company Netartmedia. Version 5.0 of Netartmedia Real Estate Portal has a SQL injection vulnerability. This vulnerability stems from the useremail parameter, which allows for SQL injections,...

Jettweb PHP Hazir Haber Sitesi Scripti SQL注入漏洞

Jettweb PHP Preconfigured News Sites Script is a content management system developed by the Turkish company Jettweb. Version V1 of the Jettweb PHP Preconfigured News Sites Script has a SQL injection vulnerability. This vulnerability stems from the cid parameter, which allows for SQL injections. I...

mod_cluster 注入漏洞

modcluster is a httpd-based load balancer within the modcluster project. Modcluster has an injection vulnerability, which stems from a CRLF injection in the decodeenc function. This vulnerability may lead to bypassing input validation...

Jettweb PHP Hazir Haber Sitesi Scripti SQL注入漏洞

Jettweb PHP Ready-made News Sites Script is a content management system provided by the Turkish company Jettweb. Version V1 of the Jettweb PHP Ready-made News Sites Script has a SQL injection vulnerability. This vulnerability stems from the galleryid parameter, which allows for SQL injections. It...

CVE-2025-70024

An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14...

EUVD-2026-11401

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the ajax graphs library that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via unsanitized header or query parameter match values in the HTTPRoute resource. An attacker can bypass listener hostname constraints and...