CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...

FUXA <= 1.1.12 - Unauthenticated SQL Injection

FUXA = 1.1.12 contains a SQL injection caused by unsanitized input in /api/signin, letting attackers execute arbitrary SQL commands, exploit requires sending crafted input to the endpoint. id: CVE-2023-31719 info: name: FUXA = 1.1.12 - Unauthenticated SQL Injection author: Securin severity:...

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands...

CVE-2024-34222

Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

postgresql: PostgreSQL: Privilege escalation via unqualified type resolution in temporary schema

A flaw was found in PostgreSQL. An authenticated database user can achieve privilege escalation and execute arbitrary SQL commands with the permissions of another session. By defining a custom data type in a temporary schema pgtemp, an attacker can cause a victim's security-restricted operation t...

postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb

A flaw was found in PostgreSQL. An untrusted search path vulnerability in the vacuumdb utility allows a database owner to execute arbitrary Structured Query Language SQL commands with the privileges of the user running vacuumdb. By defining custom operators that override those used in vacuumdb's...

CVE-2026-116318

A flaw was found in PostgreSQL's pgdump utility. An authenticated database user with permission to create objects can trigger a SQL injection vulnerability by defining an inherited column with a child-local constraint whose name requires quoting. When the resulting database dump is restored, this...

CVE-2026-116316

A flaw was found in PostgreSQL. An authenticated database user can achieve privilege escalation and execute arbitrary SQL commands with the permissions of another session. By defining a custom data type in a temporary schema pgtemp, an attacker can cause a victim's security-restricted operation t...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department, userid,...

EUVD-2026-123863

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyz...

CVE-2026-126241

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized SQL commands on the underlying database...

CVE-2026-126213

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1,...

CVE-2026-126241

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized SQL commands on the underlying database...

CVE-2026-126213

A SQL Injection vulnerability (CWE-89 ) exists in FortiManager , FortiManager Cloud , FortiAnalyzer , and FortiAnalyzer Cloud . The flaw stems from improper neutralization of special elements used in SQL commands, which may allow an authenticated attacker to execute unauthorized SQL commands via ...

CVE-2026-126213

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1,...

EUVD-2026-122981

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2026-126241: Fortinet FortiAuthenticator: A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized SQL commands on the underlying database...

CVE-2026-126213: Fortinet: A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyz...