CVE-2026-26889

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managecategory.php...

CVE-2026-26883

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=deleteappointment...

WordPress Grand Wedding theme <= 3.1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Grand Wedding versions = 3.1.0...

CVE-2026-1487

CVE-2026-1487 relates to the LatePoint WordPress plugin (Calendar Booking Plugin for Appointments and Events), with vulnerability in all versions up to and including 5.2.7. The issue is an authenticated SQL injection via JSON Import, exploitable by attackers with Administrator-level access and ab...

CVE-2026-1487

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and including, 5.2.7 due to insufficient validation on the user-supplied JSON data. This makes it possible for authenticated attackers...

CVE-2026-26888

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/managestock.php...

CVE-2026-26883

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=deleteappointment...

PT-2026-22785

Name of the Vulnerable Software and Affected Versions Sourcecodester Pharmacy Point of Sale System version 1.0 Description The Sourcecodester Pharmacy Point of Sale System version 1.0 is susceptible to SQL Injection. This issue is present in the /pharmacy/manage supplier.php file. The vulnerabili...

PT-2026-22789

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage carrier.php...

PT-2026-22738

Name of the Vulnerable Software and Affected Versions renren-secuity versions prior to 5.5.0 Description The software contains a SQL Injection issue in the BaseServiceImpl.java component. The issue allows for potential unauthorized access or modification of data. Recommendations Update to version...

PT-2026-22711

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and including, 5.2.7 due to insufficient validation on the user-supplied JSON data. This makes it possible for authenticated attackers...

PT-2026-22787

Name of the Vulnerable Software and Affected Versions Sourcecodester Pharmacy Point of Sale System version 1.0 Description The software is susceptible to SQL Injection. The issue is located in the /pharmacy/manage category.php file. The manage category.php script does not properly sanitize...

CVE-2026-26883

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=deleteappointment...

EUVD-2026-9307

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageproduct.php...

SourceCodester Online Mens Salon Management security vulnerabilities

SourceCodester Online Mens Salon Management is an open-source online men’s salon management system developed by SourceCodester. Version 1.0 of SourceCodester Online Mens Salon Management contains a security vulnerability, which stems from SQL injection in the /admin/services/manageservice.php fil...

SourceCodester Online Mens Salon Management security vulnerabilities

SourceCodester Online Mens Salon Management is an open-source online men’s salon management system developed by SourceCodester. Version 1.0 of SourceCodester Online Mens Salon Management contains a security vulnerability, which stems from SQL injection in the...

renren-security Security Vulnerabilities

Renren-security is a lightweight, front-end-independent Java rapid development platform open source by Renrenio. Versions of renren-security prior to v5.5.0 have security vulnerabilities; these vulnerabilities stem from the BaseServiceImpl.java component, which is vulnerable to SQL injection...

SourceCodester Logistic Hub Parcel Management System has security vulnerabilities

SourceCodester Logistic Hub Parcel Management System is a simple web-based open-source application project developed by SourceCodester. Its main purpose is to provide a automated platform for logistics centers to manage and track parcel records. Version 1.0 of the SourceCodester Logistic Hub Parc...

ITSsourcecode College Management System SQL Injection Vulnerability

itsourcecode College Management System is an open-source university management system developed by itsourcecode. Version 1.0 of itsourcecode College Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the coursecode parameter in the file...

SQL Injection

Overview cocoindex is a With CocoIndex, users declare the transformation, CocoIndex creates & maintains an index, and keeps the derived index up to date based on source update, with minimal computation and changes. Affected versions of this package are vulnerable to SQL Injection in the Doris...