itsourcecode sales-and-inventory-system input validation error vulnerability

The itsourcecode sales-and-inventory-system has a security vulnerability stemming from improper handling of the ID parameter in the /pages/custedit.php file, which may lead to SQL injection...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the dateto/datefrom parameters in the mysqliquery function within the file reportsearch.php, potentially leading to SQL injection...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

EUVD-2026-105086

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608

The Configurable Reports block for Moodle (moodle-block_configurablereports) versions prior to 5.3.1 is vulnerable to an SQL injection in the report_sql::prepare_sql() function. The flaw is triggered via the filter_var request parameter within viewreport.php. Low-privileged users authorized to vi...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

Exploit for CVE-2026-93300

CVE-2026-93300 — EventON - Subscriber ≤ 1.4.5 Unauthenticated...

CVE-2026-108087

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin Workreap Core versions 3.4.4...

CVE-2026-108087

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-108087 Apache Cocoon: SQL Injection

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-108087

The Apache Cocoon project (all versions) is susceptible to an SQL injection vulnerability due to missing input sanitation. This flaw allows for arbitrary SQL injection via the SQL processor or sql:/esql: logicsheets . Because the project is retired, the maintainer does not plan to release a fix. ...

EUVD-2026-104912

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-108087 Apache Cocoon: SQL Injection

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-113381

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

CVE-2026-112238

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

Exploit for SQL Injection in Moodle

CVE-2026-102578 text | / |...

CVE-2026-113381 Osclass Item Model Item.php findUserItems sql injection

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...