PT-2026-95904

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description An issue exists in the processing of the file /reviewer 0/admins/assessments/course/btn functions.php where improper handling of the Course argument allows for remote SQL...

CVE-2026-94032: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

PT-2026-95952

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries, by manipulating the Password variable within the...

CVE-2026-93978: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

PT-2026-95965

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description An issue exists in the file /drug recommender/Admin/edit user.php where improper handling of the ID argument allows for remote SQL injection. SQL injection is a technique where ...

PT-2026-95941

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable within the /reviewer 0/admins/assessments/subject/btn functions.php?action=remove endpoint...

PT-2026-95954

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A SQL injection flaw exists in the /Admin/edit symptom.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

CVE-2026-94042: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

CVE-2026-93980: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...

PT-2026-95975

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A SQL injection flaw exists in the /module/department/index.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

CVE-2026-94041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality of the file admin/addmenu.php. The manipulation of the argument item/price/image/type leads to sql injection. It is...

PT-2026-95953

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A SQL injection flaw exists in the Admin Login Form component within the /admin/login.php endpoint. A remote attacker can exploit this by manipulating the Password variable,...

PT-2026-95910

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the DEPTID argument within an unknown function of the /module/department/controller.php file. SQL injection is a...

PT-2026-95994

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An unauthenticated SQL Injection exists in the OrdaSoft Joomla Gallery extension. The functions showSearchResult and showSearchResultAjax process the textsearch or searchText request...

CVE-2026-93973: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

PT-2026-95995

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An issue exists where the saveGallery function passes form data through a custom parser into the Joomla Input object. The data is subsequently read using ARRAY and STRING filter types...

Exploit for CVE-2026-77635

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-79752

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-93983

OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...

CVE-2026-93983 OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filter

OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...