CVE-2026-85215

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09...

CVE-2026-104614

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

WordPress SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin <= 3.5.3 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by Adrien Brunner in WordPress Plugin SupportCandy versions = 3.5.3...

EUVD-2026-91647

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104614

A SQL injection vulnerability exists in CodeAstro Simple Pharmacy Management System 1.0 . The flaw is located in the /SimplePharmacy-PHP/product/delete.php file, where improper processing of the ID argument allows for remote exploitation. An exploit is currently publicly available and may be used...

CVE-2026-104614 CodeAstro Simple Pharmacy Management System delete.php sql injection

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2022-28346

CVE-2022-28346 QuerySet.annotate、aggregate 和 extra 中的 SQL 注入漏洞 设置： 运行 ./setup.sh 进行初始设置 打开 Docker 镜像以初始化数据库： docker exec -it containerid /bin/bash 然后运行以下命令： python manage.py makemigrations cve202228346 python manage.py migrate 启动实例： docker-compose up 现在打开以下 URL 加载示例数据：...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL 代码注入 通过 SQL 代码生成注入在 Apache Flink TaskManager 上实现远程代码执行。 | ---|--- CVE| CVE-2026-35194 CVSS| 8.1（高危） CWE| CWE-94 — 代码注入 受影响版本| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 修复版本| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1 攻击面| SQL Gateway REST API（默认端口 8083，无认证） 快速开始 1. 部署漏洞实验环境...

wp2shell-PoC

wp2shell-PoC ⚠ 本工具仅用于教育或漏洞赏金目的。严禁在受控环境之外未经授权使用。 概述 针对影响 WordPress Core 的 wp2shell 漏洞链的概念验证，结合了 CVE-2026-63030 和 CVE-2026-60137。该项目演示了 REST API Batch 路由混淆漏洞与 WPQuery SQL 注入之间的交互，最终形成一条未经身份验证即可完全攻陷 WordPress 并实现远程代码执行（RCE）的路径。 阅读完整公告此处 工作原理 wp2shell 是 WordPress 核心中的一个预认证 RCE 漏洞链，结合了...

EUVD-2026-91632

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

CVE-2026-104613 CodeAstro Simple Pharmacy Management System view.php sql injection

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

EUVD-2026-91631

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09...

CVE-2026-85215

A SQL Injection vulnerability exists in GG Soft Software Services Inc. Paperwork due to the improper neutralization of special elements used in SQL commands. This issue affects versions of the software through 2026-09-09 . The vulnerability allows an attacker to execute unauthorized SQL commands,...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - 多处 SQL 注入漏洞 - saveticket 描述 ：Customer Support System 1.0 中 /customersupport/ajax.php?action=saveticket 存在多处 SQL 注入漏洞，允许已认证的攻击者通过 departmentid、customerid 和 subject 参数执行任意 SQL 命令。 受影响产品版本 ：Customer Support System 1.0 CVE 作者 ：Geraldo Alcântara 日期 ：2023 年 ...

CVE-2022-27414

CVE-2022-27414 - SQL注入 College Website CMS v1.0 - CVE-2022-27414 - SQL注入 CVE 链接 https://vulners.com/cve/CVE-2022-27414 以下为 PoC 漏洞代码 从 "cwms\departments\index.php" 的第 9 行开始 query"SELECT FROM departmentlist where deleteflag = 0 and status = 1 order by name asc"; while $row = $departments-fetchassoc...

CVE-2022-0739

CVE-2022-0739 概念验证漏洞利用程序 SQLI BookingPress 1.0.11 之前版本 免责声明 未经事先相互同意使用本程序可被视为非法活动。最终用户有责任遵守所有适用的地方、州和联邦法律。开发者不承担任何责任，也不对因使用本程序造成的任何滥用或损害负责。...

CVE-2026-104609

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file editaccounts.php. This manipulation of the argument userid/patientid/physicianid/discountsid/servicesid causes sql injection. Remote...

CVE-2026-104460

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the newtextsearch action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in actions/newtextsearch.php without escaping. Anonymous attackers can plant a malicious option id in an anonymously editable...