CVE-2026-105254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88395: Improper Neutralization of Special Elements used in an SQL Command

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

PT-2026-106006

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88395

The software GouGuOA version v6.0.5 and before is vulnerable to an SQL Injection flaw located in the /home/message/rubbish endpoint. The vulnerability is triggered via the keywords parameter , which fails to properly neutralize special elements used in SQL commands (CWE-89). This flaw could allow...

EUVD-2026-92469

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-105176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2026-105184: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-105187: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

PT-2026-106169

Name of the Vulnerable Software and Affected Versions WP BASE Booking versions prior to 6.4.1 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database tr...

PT-2026-106016

Name of the Vulnerable Software and Affected Versions ApiAdmin versions prior to 5.1 Description SQL Injection occurs in the user-list endpoint "/admin/User/getUsers" through the gid parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for executio...

PT-2026-106176

Name of the Vulnerable Software and Affected Versions feelec-yishu feelcrm-os version 1.0.0 Description A remote SQL injection exists in the Member Endpoint component. The issue occurs within the index function of the file App/Feelcrm/Index/Controller/MemberController.class.php when the group id...

Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

moosocial Social-Commerce 3.2.4 SQL Injection

moosocial Social-Commerce version 3.2.4 suffers from a remote SQL injection vulnerability. Exploit Title: moosocial Social-Commerce 3.2.4 - SQL Injection time-based blind Exploit Author: CraCkEr Date: 26/08/2026 Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link:...

CVE-2026-105383: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 스캐너 CKAN DataStore용 SQL 인젝션 스캐너 이 도구는 CKAN DataStore 플랫폼에서 CVE-2026-42031SQL 인젝션 취약점을 탐지하고 검증하는 데 사용됩니다. 📋 기능 ✅ 8가지 자동 검증 쿼리데이터베이스, 테이블, 컬럼 등 ✅ 멀티 타겟 스캐닝도메인 및 IP 지원 ✅ 단일 스레드 모드깔끔하고 안정적인 출력 ✅ CSV로 데이터 덤프테이블당 100행 ✅ 자동 JSON 및 TXT 보고서 ✅ 자동 및 수동 모드유연함 📸 스크린샷 🚀 사용 방법 1. 종속성 설치 pip...

CVE-2024-32640

CVE-2024-32640 MySQL 블라인드 SQL 인젝션 개념 증명 이 Python 스크립트는 MySQL 데이터베이스 를 대상으로 하는 시간 기반 블라인드 SQL 인젝션 익스플로잇을 시연하며, 특히 CVE-2024-32640 용으로 설계되었습니다. 대상 URL의 취약점을 확인하는 데 사용할 수 있으며, 취약점이 존재할 경우 현재 데이터베이스 이름이나 현재 MySQL 사용자와 같은 정보를 추출합니다. 기능 취약점 탐지 : 시간 기반 SLEEP 지연을 통해 SQL 인젝션 취약점을 탐지합니다. 정보 추출 : 이진 탐색을 사용하여...

CVE-2026-9082

CVE-2026-9082 / Drupal SA-CORE-2026-004 개념 증명 면책 조항: 이 개념 증명은 교육 및 연구 목적으로만 제공됩니다. 소유권이 없거나 명시적인 테스트 허가를 받지 않은 시스템에 대해 이 소프트웨어를 사용하지 마십시오. 저자는 이 프로젝트로 인한 오용 또는 손해에 대해 책임을 지지 않습니다. 개요 A Proof-of-Concept poc.py of CVE-2026-9082 Drupal SA-CORE-2026-004는 Drupal 코어의 치명적인 SQL 인젝션 취약점으로, Drupal이...