CVE-2026-105856

The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2026-105845

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

cs4239-cve-2020-15873

CVE-2020-15873 Prueba de concepto de CVE-2020-15873 - Inyección SQL ciega en Librenms librenms librenms Desarrollo Depuración de la instancia Docker de LibreNMS 1. Obtén un shell en el contenedor: $ sudo docker exec -it librenmsvuln /bin/bash 2. Para leer los registros generados por LibreNMS: $...

Payload: SQL Injection in SQLite and Postgres

Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...

GHSA-V49J-62M6-PGRR Payload: SQL Injection in SQLite and Postgres

Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...

NPM: Payload: SQL Injection in SQLite and Postgres

NPM: Payload: SQL Injection in SQLite and Postgres vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.88.0...

CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

EUVD-2026-93487

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105957

A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

EUVD-2026-93471

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845

The Payload headless content management system is vulnerable to SQL injection in its SQLite and Postgres adapters. This vulnerability affects versions 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27 . An untrusted user capable of querying readable collections via dynamic filters or...

cve-2026-9082

CVE-2026-9082 Tipo : Inyección SQL CWE-89 Producto afectado : Drupal Core API de abstracción de base de datos Aviso de Drupal : SA-CORE-2026-004 Publicado : 20 de mayo de 2026 Gravedad : Altamente crítica Drupal 20/25 | NVD CVSS 6.5 ¿Qué es? CVE-2026-9082 es una vulnerabilidad de inyección SQL en...

CVE-2026-23921

CVE-2026-23921 — Zabbix Time-Based Blind SQL Injection Affected versions: Zabbix 50 THEN pgsleep3 ELSE pgsleep0 END-- Usage PostgreSQL backend d...

CVE-2025-4396

CVE-2025-4396 — Inyección SQL en Relevanssi Ciega Basada en Tiempo Descargo de responsabilidad: Este repositorio está destinado únicamente a pruebas de penetración autorizadas, investigación de seguridad y fines educativos. El acceso no autorizado a sistemas informáticos es ilegal y poco ético...

CVE-2026-105921

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...