287093 matches found
CVE-2026-90526: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-90525: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...
CVE-2026-90516: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/payreport.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit has...
CVE-2026-90515: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...
CVE-2026-90514: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-90511: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql...
CVE-2026-90496: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...
CVE-2026-90495: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...
PT-2026-90785
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...
PT-2026-90843
Name of the Vulnerable Software and Affected Versions SourceCodester School Registration and Fee System version 1.0 Description A remote SQL injection is possible due to improper handling of the selector argument within an unknown function in the /bilal/normal/delete stud.php file. SQL injection ...
PT-2026-90845
Name of the Vulnerable Software and Affected Versions SourceCodester School Registration and Fee System version 1.0 Description A remote SQL injection is possible due to improper handling of the period argument within an unknown function in the /bilal/normal/pay report.php file. SQL injection is ...
PT-2026-90830
Name of the Vulnerable Software and Affected Versions GongShengyue OnlineBooks versions up to dfc5eacc08d3b0396c266049548618f6fb9587ea Description A remote SQL injection exists within the listSplit interface, specifically in the src/cn/ylcto/book/servlet/BooksServlet.java file. The issue occurs...
PT-2026-90842
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save stud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2026-90931
Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the file /pages/emp transac.php?action=add. The issue occurs when the firstname argument is manipulated, allowing an attacker to execute...
PT-2026-90940
šØ CVE-2020-15875 An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax table.php API endpoint. This affects as-selection.inc.php,...
EUVD-2020-31272
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...
CVE-2026-36989
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...
EUVD-2026-77110
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...
CVE-2020-15875
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajaxtable.php API endpoint. This affects as-selection.inc.php, edit-ports.inc.php,...