CVE-2026-57190 Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the PostgreSQL and TDS/MSSQL Channel Event Log backends celpgsql and celtds may permit arbitrary SQL execution when untrust...

CVE-2026-87085

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-117515

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-117516

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

CVE-2026-108308

Tanium addressed a SQL injection vulnerability in Patch...

WordPress WP Inventory Manager plugin <= 2.5.5 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Inventory Manager versions = 2.5.5...

WordPress VikRentCar Car Rental Management System plugin <= 1.4.10 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin VikRentCar versions = 1.4.10...

WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.8 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Visitor Statistics Real Time Traffic versions = 8.8...

qts-atividadeextra

Laboratório de Segurança OWASP SQL Injection e XSS Atividad...

CVE-2026-87085

Tanium addressed a SQL injection vulnerability (CWE-89) in the Provision component. While the specific root cause and affected versions are not detailed in the provided documents, the vulnerability allows for potential unauthorized data manipulation or access via network vectors. The base severit...

EUVD-2026-111240

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-87085 Tanium addressed a SQL injection vulnerability in Provision.

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-108308 Tanium addressed a SQL injection vulnerability in Patch.

Tanium addressed a SQL injection vulnerability in Patch...

EUVD-2026-111239

Tanium addressed a SQL injection vulnerability in Patch...

CVE-2026-108308

Tanium addressed a SQL injection vulnerability (CWE-89) within its Patch component. This vulnerability allows for high confidentiality impact via network access with low privileges and low complexity. While specific exploit details are not provided in the documents, the issue has been addressed b...

CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

EUVD-2026-111238

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

CVE-2026-117516

A SQL injection vulnerability exists in the Contact Form Handler component of the oretnom23 php-travel-agency-system software. The flaw is located within an unknown function of the contact_insert.php file, where improper handling of the name , company , email , topic , phone , and comments argume...

CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...