CVE-2026-82307

Dolusoft Software Technologies SOPLOG is vulnerable to an SQL injection due to the improper neutralization of special elements used in SQL commands. This vulnerability affects versions before Soplog 2026.9.4.1 . The flaw allows an attacker to execute unauthorized SQL commands, potentially leading...

CVE-2026-82307 Multiple Vulnerabilities in Dolusoft Software's SOPLOG

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...

CVE-2026-97293

Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...

CVE-2026-97287

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.This issue affects Event Tickets: from n/a through 5.29.5...

CVE-2026-96827

Administrator SQL Injection in Admin Notices Manager = 1.6.0 versions...

CVE-2026-96828

Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...

CVE-2026-96822

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

CVE-2026-96345

Administrator SQL Injection in Estatik = 4.3.5 versions...

CVE-2026-96346

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-94177

Unauthenticated SQL Injection in GamiPress = 8.0.2 versions...

CVE-2026-94082

Author SQL Injection in Quiz Cat = 3.1.1 versions...

CVE-2026-94115

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

CVE-2026-93621

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

CVE-2026-62085

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

CVE-2026-103117

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...

CVE-2026-103116

A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...

CVE-2026-103115

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-103117

A security vulnerability exists in OS4ED openSIS-Classic up to version 9.3. The flaw is located in the db_properties function within the functions/DatabaseInc.php file of the Save Data Handler component. Improper handling of argument values allows for a remote SQL injection attack. While the expl...

CVE-2026-103117 OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...

CVE-2026-103117 OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...