CVE-2026-116048 krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file /source/registerform1.php of the component Registration. Performing a manipulation of the argument...

Staff-Hub-SQLi

StaffHub Lab 01 — UNION-Based SQL Injection An intentionall...

CVE-2026-115999

A vulnerability has been found in mansi-k RestaurantIMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqliconnect of the file lsmodal.php. The manipulation of the argument loginid/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follo...

spip-cve-2026

SPIP 4.4.16 - CVE-2026-72708 and CVE-2026-109378 Reproducible...

CVE-2026-115999 mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection

A vulnerability has been found in mansi-k RestaurantIMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqliconnect of the file lsmodal.php. The manipulation of the argument loginid/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follo...

CVE-2026-115999

A SQL injection vulnerability exists in mansi-k Restaurant_IMS (d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694). The flaw is located in the mysqli_connect function within the lsmodal.php file, where the manipulation of the login_id/epsw arguments allows for remote exploitation . Due to a rolling releas...

EUVD-2026-109328

A vulnerability has been found in mansi-k RestaurantIMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqliconnect of the file lsmodal.php. The manipulation of the argument loginid/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follo...

CVE-2026-115999 mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection

A vulnerability has been found in mansi-k RestaurantIMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqliconnect of the file lsmodal.php. The manipulation of the argument loginid/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follo...

CVE-2026-115997

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

PT-2026-123062

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

SourceCodester Performance Indicator System input validation error vulnerability

Version 1.0 of the SourceCodester Performance Indicator System contains a security vulnerability stemming from improper handling of the Contact parameter in the file /opils/staff/editdealer.php, which may lead to SQL injection...

PT-2026-123048

Name of the Vulnerable Software and Affected Versions YesWiki versions 4.6.0 through 4.6.x YesWiki versions 5.0.0-alpha1 through 5.0.0-alpha3 Description An unauthenticated SQL injection exists in the SearchManager::prepareSearchRequest function. The issue occurs because field names from the quer...

SourceCodester Performance Indicator System input validation error vulnerability

Version 1.0 of the SourceCodester Performance Indicator System contains a security vulnerability stemming from improper handling of the Contact parameter in the file /opils/staff/adddealer.php, which may lead to SQL injection...

Mansi Khamkar Restaurant_IMS input validation error vulnerability

The Mansi Khamkar RestaurantIMS has a security vulnerability stemming from improper handling of the loginid/epsw parameters in the mysqliconnect function within the file lsmodal.php. This vulnerability can be exploited remotely and may lead to SQL injection...

Pig-Mesh Pig input validation error vulnerability

Versions 4.0 and 4.1.0 of Pig Mesh contain a security vulnerability. This vulnerability stems from improper handling of the “ascs” and “descs” parameters in the orderItem.getColumn function within the file...

YesWiki SQL injection vulnerability

Versions prior to YesWiki 4.7.0, specifically 4.6.0 and versions prior to 5.0.0-alpha1 in 5.0.0-alpha4, contain an SQL injection vulnerability. This vulnerability stems from unauthenticated SQL injection within SearchManager::prepareSearchRequest. In the query and searchfields parameters of the...

Krupal Employee Recruitment System input validation error vulnerability

The Krupal Employee Recruitment System has a security vulnerability. This vulnerability stems from improper handling of the parameters firstname, middlename, lastname, gender, birthdate, state, statespecify, city, and cityspecify by the mysqlquery function within the Registration component at...

Krupal Employee Recruitment System input validation error vulnerability

The Krupal Employee Recruitment System has a security vulnerability. This vulnerability stems from improper handling of parameters such as university/institute/branch/degree/status/cpi/semester/experience by the mysqlquery function in the file /source/registerform2.php within the Registration...

PT-2026-123112

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit dealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

PT-2026-122960

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argument pemail leads to sql injection. The attack can...