272431 matches found
CVE-2024-8275
CVE-2024-8275 CVE-2024-8275 es una vulnerabilidad crítica de inyección SQL descubierta en el plugin de WordPress The Events Calendar. Esta vulnerabilidad afecta a versiones hasta la 6.6.4 inclusive. El problema surge por un escape insuficiente del parámetro 'order' en la función tribehasnextevent...
CVE-2024-43917
CVE-2024-43917 Este script demuestra una vulnerabilidad de inyección SQL encontrada en el plugin TI WooCommerce Wishlist para WordPress, en versiones hasta la 2.8.2 CVE-2024-43917. La vulnerabilidad permite a usuarios no autenticados ejecutar comandos SQL arbitrarios en la base de datos del sitio...
EUVD-2026-89949
A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...
CVE-2026-103117 OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...
CVE-2026-103117
A security vulnerability exists in OS4ED openSIS-Classic up to version 9.3. The flaw is located in the db_properties function within the functions/DatabaseInc.php file of the Save Data Handler component. Improper handling of argument values allows for a remote SQL injection attack. While the expl...
CVE-2026-103117 OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...
CVE-2026-103117 OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...
CVE-2026-103116 OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...
CVE-2026-103116
A SQL injection vulnerability exists in OS4ED openSIS-Classic versions up to 9.3 . The flaw is located within the DBQuery function of the functions/GetStuListFnc.php file in the Student List Search Endpoint component. The vulnerability is triggered by the manipulation of the LO_sort argument, all...
EUVD-2026-89947
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...
CVE-2026-103116 OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...
CVE-2026-97293
The WordPress Media Library Assistant plugin version 3.41 and below is vulnerable to a SQL Injection flaw within the Contributor role functionality. The vulnerability allows for unauthorized database interaction, potentially impacting confidentiality and availability. No specific exploit links or...
CVE-2026-97293 WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...
EUVD-2026-89932
Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...
CVE-2026-97293 WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...
CVE-2026-97287 WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.This issue affects Event Tickets: from n/a through 5.29.5...
EUVD-2026-89928
Contributor SQL Injection in Event Tickets = 5.29.5 versions...
CVE-2026-97287 WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.This issue affects Event Tickets: from n/a through 5.29.5...