CVE-2026-90525: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

PT-2026-90842

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save stud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-90864

Name of the Vulnerable Software and Affected Versions SourceCodester School Registration and Fee System version 1.0 Description An issue exists in the /bilal/save class.php file where the manipulation of the Category argument allows for SQL injection, a technique used to interfere with the querie...

CVE-2026-90516: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/payreport.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit has...

PT-2026-90982

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within the /pages/inv edit1.php endpoint. SQL injection is a technique where an attacker inserts...

CVE-2026-90511: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql...

CVE-2026-90515: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...

EUVD-2026-77110

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...

PT-2026-90845

Name of the Vulnerable Software and Affected Versions SourceCodester School Registration and Fee System version 1.0 Description A remote SQL injection is possible due to improper handling of the period argument within an unknown function in the /bilal/normal/pay report.php file. SQL injection is ...

PT-2026-90931

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the file /pages/emp transac.php?action=add. The issue occurs when the firstname argument is manipulated, allowing an attacker to execute...

PT-2026-90978

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-36989

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...

PT-2026-90862

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection exists in the /pages/cust pos trans.php endpoint. This issue occurs when the firstname variable is manipulated, allowing an attacker to execute unauthorized...

PT-2026-90960

Name of the Vulnerable Software and Affected Versions LuxSoft LuxCal versions prior to 5.3.4L Description A SQL Injection issue exists where an attacker can interfere with the queries that an application makes to its database. This occurs via the 'rssfeed.php' and 'common/retrieve.php' endpoints...

CVE-2026-90514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-90830

Name of the Vulnerable Software and Affected Versions GongShengyue OnlineBooks versions up to dfc5eacc08d3b0396c266049548618f6fb9587ea Description A remote SQL injection exists within the listSplit interface, specifically in the src/cn/ylcto/book/servlet/BooksServlet.java file. The issue occurs...

CVE-2026-90600: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

CVE-2026-90526: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

PT-2026-90785

A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...

CVE-2026-90597: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...