VeloCloud Orchestrator SQL Injection Privilege Escalation

The vulnerability in the locally deployable version of the VeloCloud Orchestrator VCO On-Premises management platform for VMware SD-WAN by VeloCloud is related to improper handling of SQL query structures. Exploitation of this vulnerability may allow a remote attacker to escalate their privileges...

CVE-2026-116061

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116062

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-109564

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062

A security flaw exists in SourceCodester Performance Indicator System 1.0 involving a SQL injection vulnerability. The issue is triggered by the manipulation of the Contact argument during processing of the file /opils/staff/save_profile.php. This vulnerability can be exploited remotely to compro...

CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116060

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-116061 SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

EUVD-2026-109563

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116061

The SourceCodester Performance Indicator System 1.0 is vulnerable to a SQL injection vulnerability within the /opils/staff/edit_dealer.php file. The flaw is caused by the improper handling of the Contact argument, allowing an attacker to execute malicious SQL commands. This attack can be initiate...

CVE-2026-116061 SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

EUVD-2026-109555

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-116060

The SourceCodester Performance Indicator System 1.0 is susceptible to a remote SQL injection vulnerability. The flaw exists within an unspecified section of the /opils/staff/adddealer.php file, where improper neutralization of the Contact argument allows for malicious manipulation. This vulnerabi...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

Exploit for CVE-2026-112866

CVE-2026-112866 - Product Filter by WBW Unauthenticated SQL In...

CVE-2026-116055

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the query parameter in SearchManager.php, which constructs a SQL SELECT statement without validating field property names. An unauthenticated attacker can supply a malicious field identifier containing SQL expressions...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the forcedDate parameter in includes/services/PageManager.php, where user-supplied input is interpolated directly into an SQL INSERT statement without validation. An attacker can inject arbitrary SQL by supplying a...