CVE-2026-88424

The software FineAdmin v1.0 contains a SQL injection vulnerability within the ButtonService.GetListByFilter() function. The flaw is triggered via the field/order parameter, which allows an attacker to execute crafted SQL statements to access sensitive database information . A Proof of Concept (Po...

PT-2026-106268

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

PT-2026-104711

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer 0/admins/assessments/activities/btn functions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

PT-2026-104661

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-88397

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

CVE-2026-105168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

CVE-2026-105246: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

CVE-2026-88395

The software GouGuOA version v6.0.5 and before is vulnerable to an SQL Injection flaw located in the /home/message/rubbish endpoint. The vulnerability is triggered via the keywords parameter , which fails to properly neutralize special elements used in SQL commands (CWE-89). This flaw could allow...

CVE-2026-105388: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the argument groupid causes sql injection. The attack can be...

CVE-2026-71298: Improper Neutralization of Special Elements used in an SQL Command

A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database...

CVE-2026-88424: Undefined Security Weakness

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

CVE-2026-105254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

moosocial Social-Commerce 3.2.4 SQL Injection

moosocial Social-Commerce version 3.2.4 suffers from a remote SQL injection vulnerability. https://packetstorm.news/download/234204...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 스캐너 CKAN DataStore용 SQL 인젝션 스캐너 이 도구는 CKAN DataStore 플랫폼에서 CVE-2026-42031SQL 인젝션 취약점을 탐지하고 검증하는 데 사용됩니다. 📋 기능 ✅ 8가지 자동 검증 쿼리데이터베이스, 테이블, 컬럼 등 ✅ 멀티 타겟 스캐닝도메인 및 IP 지원 ✅ 단일 스레드 모드깔끔하고 안정적인 출력 ✅ CSV로 데이터 덤프테이블당 100행 ✅ 자동 JSON 및 TXT 보고서 ✅ 자동 및 수동 모드유연함 📸 스크린샷 🚀 사용 방법 1. 종속성 설치 pip...

CVE-2024-32640

CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept This Python script demonstrates a time-based blind SQL injection exploit for MySQL databases , specifically designed for CVE-2024-32640. It can be used to verify vulnerability in a target URL, and if the vulnerability exists, extract...

CVE-2026-9082

CVE-2026-9082 / Drupal SA-CORE-2026-004 Proof of Concept Disclaimer: This Proof-of-Concept is for educational and research purposes only. Do not use this software against any system you do not own or have explicit permission to test. The author assumes no liability for misuse or damage caused by...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Vulnerability Type SQL Injection Vendor of Product Super Store Finder Affected Product Code...