CVE-2026-100875

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ). The flaw is located in an unknown function within the updatedetailsfromfaculty.php file, where improper handling of the myfid argument allows for remote ex...

CVE-2026-100874 mathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injection

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

CVE-2026-100874

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw affects an unknown function within the addnewstudent.php file, potentially allowing for remote attacks. The vulnerability description confirms that...

CVE-2026-100874 mathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injection

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

EUVD-2026-88008

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

CVE-2026-101046

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...

CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...

CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...

EUVD-2026-87977

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...

CVE-2026-101046

Fleet versions prior to 4.89.0 are vulnerable to an SQL injection in the activity list endpoints: GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities. The root cause is the deprecated cursor-pagination helper appendListOptionsWithCursorToSQL, which interpolates caller-supplie...

CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints

Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...

Exploit for Interpretation Conflict in Wordpress

WP2Shell — Unauthenticated SQL Injection Proof of Concept C...

Exploit for CVE-2026-48842

CVE-2026-48842 PoC — Roundcube virtuserquery pre-auth SQLi...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - PoC d'injection SQL non authentifiée menant à une RCE Usage éducatif et recherche en sécurité uniquement - Voir l'avis juridique ci-dessous Preuve de concept d'exploitation pour CVE-2025-57819, une vulnérabilité critique d'injection SQL non authentifiée dans FreePBX...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the sortOrder parameter in the AbstractSearchableListAction.php process. An attacker can access sensitive database information, including user credentials and station settings, by injecting arbitrary DQL expressions...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

EUVD-2026-87814

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

PT-2026-99694

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote SQL injection is possible via the myfid argument in the updatedetailsfromfaculty.php file. SQL injection is a technique where an attacker...

PT-2026-99693

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A flaw in the file addnewstudent.php allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for...

CVE-2026-100874: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...