EUVD-2026-89822

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

CVE-2026-62085 WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

CVE-2026-103114

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103115 OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

EUVD-2026-89799

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-103115

A security flaw exists in OS4ED openSIS-Classic up to version 9.3 within the Student Search component. Specifically, an unknown function in the file functions/CustomFieldsFnc.php is vulnerable to SQL injection when the cust argument is manipulated. This flaw can be triggered via a remote attack ....

CVE-2026-103115 OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-103115 OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse

A SQL injection flaw in PostgreSQL's EXTRACT expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pgdump or psql inspect o...

wordpress_exploit

Vulnerable Lab: CVE-2026-63030 WordPress This environment r...

CVE-2025-26198

CVE-2025-26198 - Demostración de Inyección SQL Proyecto académico ENSIMAG - Seguridad 3A Autores: Wail Yacoubi, Mohammed-Yassine Akhmari Fecha: Enero 2026 Advertencia Este código es intencionalmente vulnerable con fines educativos. Nunca desplegar en producción. Descripción Reproducción de...

CVE-2019-9053-POC

CMS Made Simple ⚠️ Descargo de responsabilidad: Este script es solo para fines educativos y de pruebas autorizadas. No lo utilice en sistemas que no sean de su propiedad o para los que no tenga permiso explícito para probar. El autor y los colaboradores no se responsabilizan por el mal uso o los...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Detección de Inyección SQL basada en tiempo para SMM Panel Resumen Esta plantilla detecta una vulnerabilidad de Inyección SQL basada en tiempo en el parámetro servicedetail del SMM Panel a través de solicitudes HTTP POST a /ajaxdata. La explotación puede permitir a...

cve-2024-48325

CVE-2024-48325 Description: An authenticated user can abuse SQL injection vulnerability exists in the getDocuments function of the InstituicaoDocumentacaoController class. The instituicaoid parameter in /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid is not proper...

WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Business Directory versions = 6.4.27...

WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Activity Log versions = 5.6.6...

CVE-2026-103113

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

CVE-2026-103114 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103114 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103114

A SQL injection vulnerability exists in OS4ED openSIS-Classic up to version 9.3 . The flaw is located in the Assignment Management Endpoint within the DBQuery_assignment function of the modules/grades/Assignments.php file. An attacker can remotely initiate the attack by manipulating the Tables ar...