PT-2026-117088

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

PT-2026-116541

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file exammanger.php of the component AJAX Endpoint. The manipulation of the argument subject results in sql injection. The...

VulnCheck KEV: CVE-2020-10549

rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices...

PT-2026-116539

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQLDB::noresults/MySQLDB::getExams/MySQLDB::latestExamID/MySQLDB::getreport of the file...

CVE-2026-111873: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file exammanger.php of the component AJAX Endpoint. The manipulation of the argument subject results in sql injection. The...

CVE-2026-110895: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54...

CVE-2026-112017: Improper Neutralization of Special Elements used in an SQL Command

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...

stirling-h2-import-leftover

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-111866 nemoTyrant manong func.php arr2sql sql injection

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/delcache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...

CVE-2026-111866

A SQL injection vulnerability exists in nemoTyrant manong affecting the cache/del_cache/arr2sql function within the func.php file. An attacker may initiate this attack remotely to manipulate the database. Due to a rolling release model, specific affected version numbers are not provided, though t...

CVE-2026-111866 nemoTyrant manong func.php arr2sql sql injection

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/delcache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...

Ravi Teja Online-Examination-System Input Verification Error Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from incorrect operations with parameters in the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php, specifically query/qtype/sortname/sortorder. This could lead to SQL injection attacks...

WordPress Booktics SQL Injection Vulnerability

WordPress Booktics versions 1.0.29 and earlier have a SQL injection vulnerability. This vulnerability arises due to improper handling of special elements in SQL commands, which may lead to SQL injections...

JEECG official open-source JeecgBoot AI low-code platform has a SQL injection vulnerability.

The JEECG official open-source JeecgBoot AI low-code platform versions prior to 3.9.5 have a SQL injection vulnerability. This vulnerability stems from improper handling of newline characters when processing dictionary and online report SQL fragments. Certified attackers can bypass the...

DevItems Support: Genix SQL Injection Vulnerability

DevItems Support Genix versions 1.4.54 and earlier have a SQL injection vulnerability. This vulnerability arises from improper neutralization of special elements in SQL commands, which may lead to SQL injections...

Ravi Teja Online-Examination-System Input Verification Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from incorrect handling of parameters “id” and “topic” in the file results.php/include/database.php. It may lead to SQL injection attacks, and the attacks can be initiated remotely...

Kishan Lal Hospital Management System: Input validation error vulnerability

The Kishan Lal Hospital Management System has a security vulnerability. This vulnerability stems from the incorrect handling of the parameter ID in the mysqliquery function of the Appointment Cancellation Handler component, which may lead to SQL injection...

Ravi Teja Online-Examination-System Input Verification Error Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the improper handling of parameters in the exammanger.php file within the AJAX Endpoint component’s MySQLDB::topicslist function. It may lead to SQL injection attacks...

nemoTyrant manong input validation error vulnerability

nemoTyrant manong has a security vulnerability. This vulnerability stems from operational issues with the functions cache/delcache/arr2sql in the func.php file. It may lead to SQL injection attacks, and attackers could launch attacks remotely...

Ravi Teja Online-Examination-System Input Verification Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the incorrect handling of the topicid parameter in the Exam::startExam function within the exam.php file in the Exam Module component. This could lead to SQL injection attacks, and attackers could...