262612 matches found
Ivanti Endpoint Manager Code Execution
The vulnerability of the Ivanti Endpoint Manager software control console relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2026-91271
A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...
PT-2026-91124
A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is an unknown function of the file listdoctor.php. Performing a manipulation of the argument searchtext results in sql injection. The attack may be...
PT-2026-91170
A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulation of the argument yot3 user/yot3 pass causes sql injection. It is possible to initiate the attack remotely. The explo...
CVE-2026-7848: Improper Neutralization of Special Elements used in an SQL Command
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...
VulnCheck KEV: CVE-2024-24112
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter...
PT-2026-91270
Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions prior to 15.5.5-014 Cisco Secure Email Gateway versions 16.0 through 16.0.4-301 Cisco Secure Email Gateway versions 16.5 through 16.5.0-779 Description An issue exists in the email parsing logic of Cisco...
PT-2026-91286
Name of the Vulnerable Software and Affected Versions subhajitkhan online-clinic-management-system versions up to e9ee77a8827a1446220fa07ee693dc4d9a29a578 Description A remote SQL injection flaw exists in the doctorlogin.php file. This issue occurs when the doc mail and doc pswd arguments are...
SAP NetWeaver SQL Injection Unauthorized Access
The vulnerability of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-90789: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument useremail can lead to sql injection. The attack may be launched remotely. The exploit has been made...
RHEL 10 : postgresql18 (RHSA-2026:67280)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67280 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that...
CVE-2026-90600
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...
CVE-2026-90597
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90600 itsourcecode Sales and Inventory System inv_edit1.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...
CVE-2026-90600 itsourcecode Sales and Inventory System inv_edit1.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...
CVE-2026-90600
itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection in the file /pages/inv_edit1.php via manipulation of the ID argument. The attack can be initiated remotely and requires low privileges (authentication). A proof-of-concept exploit has been publicly disclosed and may be use...
CVE-2026-90597 itsourcecode Sales and Inventory System sup_edit1.php sql injection
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90597 itsourcecode Sales and Inventory System sup_edit1.php sql injection
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90597
A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/sup_edit1.php via the ID argument. The flaw allows remote attackers with low privileges to manipulate the parameter and inject SQL, resulting in low impact ...