260228 matches found
CVE-2026-105471
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...
AlmaLinux 8 : mariadb-connector-c (ALSA-2026:75674)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:75674 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted t...
CVE-2025-45871
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...
PT-2026-106786
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view product.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...
PT-2026-106420
Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...
PT-2026-106395
Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...
PT-2026-106474
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
PT-2026-107144
Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...
PT-2026-106406
Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...
CVE-2025-45871
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...
PT-2026-106389
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
PT-2026-106407
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...
PT-2026-106473
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
PT-2026-106421
Subscriber SQL Injection in Woffice = 5.4.35 versions...
PT-2026-106453
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
PT-2026-106758
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search class.php. Such manipulation of the argument school year leads to sql injection. The attack may be launched remotely. The...
PT-2026-106363
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...
PT-2026-106394
Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...
PT-2026-106291
A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...