265390 matches found
CVE-2026-11587 Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0
SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database...
CVE-2026-11587 Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0
SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database...
EUVD-2026-113220
SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database...
CVE-2026-11587
The Centreon 26.03.0 application is vulnerable to an authenticated SQL injection via a PHP array key within the ACL management (Resources & Actions) component. An attacker with sufficient privileges to access ACL management can exploit this flaw to read and modify the Centreon database. No specif...
CVE-2026-11587
SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database...
CVE-2025-24799
CVE-2025-24799 Auto Exploit ⚡ Overview CVE-2025-24799 is a proof-of-concept PoC exploit targeting GLPI. This exploit demonstrates unauthenticated SQL Injection time-based blind to extract user credentials. Disclaimer: This PoC is for educational purposes only. Do not use on systems without...
CVE-2026-79752
CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...
CVE-2026-61996
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-103092
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...
CVE-2026-42167
CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...
EUVD-2026-112962
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-61996 WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-61996 WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
Subscriber SQL Injection in MLS On The Fly = 1.8.1.5 versions...
CVE-2026-61996
The WordPress MLS On The Fly plugin in versions
CVE-2026-39736
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.1...
CVE-2026-39736 WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.1...
EUVD-2026-112918
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.1...
CVE-2026-39736 WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.1...
CVE-2026-39736
The Crocoblock JetEngine WordPress plugin (versions through 3.9.0.1 ) is vulnerable to an SQL Injection flaw due to the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute unauthorized SQL queries, potentially leading to high confid...
