283524 matches found
CVE-2026-100898
The DevaslanPHP project-management system (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4, and 2.0.0-beta1) is vulnerable to SQL injection within the Timesheet Dashboard component. The flaw exists in the whereRaw function of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php, where a manipulation ...
EUVD-2026-88062
A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...
CVE-2026-100894
A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project affecting versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be . The flaw is located in the processing of the updateguest.php file, where improper handling of the gname argument allows for remote exploitation. ...
CVE-2026-100894 mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. Th...
CVE-2026-100894 mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. Th...
EUVD-2026-88058
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. Th...
CVE-2026-100894 mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. Th...
EUVD-2026-88051
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function orderby of the file DBquerybuilder.php of the component Database Query Builder. Performing a manipulation of the argumen...
CVE-2026-100887
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function orderby of the file DBquerybuilder.php of the component Database Query Builder. Performing a manipulation of the argumen...
CVE-2026-101105: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...
PT-2026-102303
Name of the Vulnerable Software and Affected Versions Matrimonial System version 1.0 Description Remote SQL injection is possible via the Profile Creation Endpoint. The issue occurs in the processprofile form function within the /create profile file when handling the fname variable. SQL injection...
CVE-2026-101010: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file /www/server/panel/class/data.py. The manipulation of the argument logtype leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...
CVE-2026-101110: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...
PT-2026-99787
Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote SQL injection is possible due to improper handling of the makeid argument within an unknown function of the makeresult.php file. SQL...
CVE-2026-73640: Improper Neutralization of Special Elements used in an SQL Command
Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the parameters filled in with an arbitrary SQL query. The parameter is interpreted as part of SQL predicate resulting in Time-Based...
CVE-2026-86595: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655...
CVE-2026-89303: Improper Neutralization of Special Elements used in an SQL Command
The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...
PT-2026-99741
Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description Remote SQL injection is possible due to improper processing of the gname argument within the 'updateguest.php' file. SQL injection is a...
CVE-2026-101012: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...
