272554 matches found
CVE-2026-97293: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Media LIbrary Assistant = 3.41 versions...
CVE-2026-102913: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-62097: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
CVE-2026-103116: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...
CentOS Linux 7 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-devel / etc (CENTOS7:CLSA-2024:1712837808)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1712837808 advisory. - When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle...
AlmaLinux 9.2 [TuxCare] Security Update: libpq / libpq-devel (ALMALINUX9.2:CLSA-2025:1761323193)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1761323193 advisory. - Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and...
CVE-2026-93621: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...
Rocky Linux 9.6 [TuxCare] Security Update: perl-DBI Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784809563)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784809563 advisory. - DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse...
CVE-2026-96822: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...
CVE-2026-82307: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...
CVE-2026-18782: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
CVE-2026-62085: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WP Activity Log = 5.6.6 versions...
CVE-2026-96828: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...
CVE-2026-102109: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitatio...
CVE-2026-96346: Improper Neutralization of Special Elements used in an SQL Command
Author SQL Injection in WP ERP = 1.17.9 versions...
PT-2026-103125
Name of the Vulnerable Software and Affected Versions OS4ED openSIS-Classic versions prior to 9.4 Description A security flaw in the Student Search component allows remote attackers to perform SQL injection. This occurs through the manipulation of the cust argument within the...
CVE-2026-94115: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...
CVE-2026-76570: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request...
PT-2026-103348
šØ CVE-2026-103231 A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli query of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID...
CVE-2026-102578: Improper Neutralization of Special Elements used in an SQL Command
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...