CVE-2026-112032

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

Automotive Shop Management System 1.0 SQL Injection

Automotive Shop Management System version 1.0 suffers from a remote SQL injection vulnerability. Titles: Automotive Shop Management System 1.0 Multiple SQLi Author: nu11secur1ty Date: 10/19/26 Vendor: https://github.com/oretnom23 Software:...

PT-2026-117244

A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli query of the file farmers/add.php. Executing a manipulation of the argument f no/f id/f name/f locallity/f ac/f phon...

PT-2026-117258

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqli real escape string of the file payment/pay.php. The manipulation of the argument f no/farmer results in sql...

CVE-2026-107081

The SENAYAN Library Management System (SLiMS) Bulian 9.8.0 is vulnerable to SQL injection via identifier injection in three admin AJAX endpoints: admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. The root cause is the direct interpolation of tableName ...

Senayan Library Management System SLiMS 9 Bulian security vulnerability

The Senayan Library Management System SLiMS version 9.8.0 contains a security vulnerability. This vulnerability stems from improper handling of the fileID parameter in the file admin/modules/reporting/customs/dldetail.php, potentially leading to SQL injection...

CVE-2026-112090: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112306: Improper Neutralization of Special Elements used in an SQL Command

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

CVE-2026-112151: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...

CVE-2026-112152: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqliquery of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sq...

CVE-2026-112141: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqliquery of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument...

CVE-2026-107083: Improper Neutralization of Special Elements used in an SQL Command

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

CVE-2026-107082

SLiMS (Senayan Library Management Systems) 9 Bulian 9.8.0 is vulnerable to SQL injection via the opac_hide and promoted GET parameters in admin/modules/bibliography/index.php. The root cause is that while escape_string() is applied, values are concatenated into an unquoted numeric SQL context , a...

EUVD-2026-104519

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

CVE-2026-107082

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...

PT-2026-117451

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqli query of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to s...

CVE-2026-107083

The SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection (CWE-89) due to improper neutralization of special elements in unquoted numeric contexts. The vulnerability exists in two admin modules: admin/modules/serial_control/subscription.php (via ite...

CVE-2026-108776: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

PT-2026-117617

Name of the Vulnerable Software and Affected Versions Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System versions prior to 3.6 Description An unauthenticated SQL injection exists in the /ws.asmx endpoint. The issue occurs when the sql argument is...

Apache Kylin SQL injection vulnerability

SQL injection vulnerabilities exist in Apache Kylin versions 4.0.0 through 5.0.4. These vulnerabilities stem from improper handling of special elements within SQL commands, potentially leading to SQL injection attacks...