Veeam Backup for Microsoft 365 SQL injection vulnerability

Veeam Backup for Microsoft 365 versions 8.0 through 8.5.0.1014 contain an SQL injection vulnerability. This vulnerability arises because authenticated organizations can inject SQL statements into the configuration database of the source server. It may result in cross-tenant read and write access ...

CVE-2026-105781: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

Oracle E-Business Suite 12.2.15 SQL Injection

Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated Thin Client Framework SQL injection issue that can lead to remote code execution. The supplied Nuclei template checks the affected AppsTCFServer handshake and proxy creation response...

Oretnom23 Online Travel Agency System input validation error vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability stemming from improper handling of the customername/voucherno/empname parameters in the admin/customersearch.php file, which may lead to SQL injection...

PT-2026-126708

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-87085: Improper Neutralization of Special Elements used in an SQL Command

Tanium addressed a SQL injection vulnerability in Provision...

PT-2026-126407

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

Asterisk SQL injection vulnerability

SQL injection vulnerabilities exist in versions prior to Asterisk 20.20.1, from 21.0.0-pre1 up to versions prior to 21.12.3, from 22.0.0-pre1 up to versions prior to 22.10.1, and from 23.0.0-pre1 up to versions prior to 23.4.1. Additionally, vulnerabilities exist in Certified Asterisk versions...

VulnCheck KEV: CVE-2026-95610

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...

CVE-2026-105489: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

CVE-2026-105779: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...

OpenPanel SQL injection vulnerability

Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This vulnerability stems from improper handling of the property parameter in profile.values, potentially allowing authenticated users to inject SELECT statements and disable range-based reads of cross-tenant data via...

YesWiki SQL injection vulnerability

Versions of YesWiki prior to 4.7.0 contain an SQL injection vulnerability. This occurs because the from parameter in despam.php is escaped but placed in an INTERVAL without quotation marks. As a result, authenticated administrators may inject SQL via the from POST parameter, enabling blind readin...

CVE-2026-117513: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...

CVE-2026-117516: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

CVE-2026-108308: Improper Neutralization of Special Elements used in an SQL Command

Tanium addressed a SQL injection vulnerability in Patch...

PT-2026-126707

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer detail.php of the component Admin Record Pages. The manipulation of the argument costomer id/ticket id/emp id/salary id/page id leads to sql injection. It is...

PT-2026-127184

A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...

CVE-2026-117515: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...

OpenPanel SQL injection vulnerability

Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This vulnerability arises because event names and dates are not properly escaped in ConversionService.getConversion; this allows malicious injection into ClickHouse SQL. As a result, members of read-only projects and owners...