CVE-2026-103066: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

CVE-2026-105232: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the...

CVE-2026-105172: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105470: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

PT-2026-104712

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-105469: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

CVE-2026-105186: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2026-102428: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...

CVE-2026-88424

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

PT-2026-104790

Name of the Vulnerable Software and Affected Versions Sirv versions prior to 8.2.5 Description An issue exists where the software fails to properly neutralize special elements used in SQL commands, allowing for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the...

CVE-2026-105385: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...

CVE-2026-88424

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

moosocial Social-Commerce 3.2.4 SQL Injection

moosocial Social-Commerce version 3.2.4 suffers from a remote SQL injection vulnerability. Exploit Title: moosocial Social-Commerce 3.2.4 - SQL Injection time-based blind Exploit Author: CraCkEr Date: 26/08/2026 Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link:...

PT-2026-106006

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

EUVD-2026-92469

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88395: Improper Neutralization of Special Elements used in an SQL Command

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88395

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

CVE-2026-88397

The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...

CVE-2026-105182: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

PT-2026-106467

Name of the Vulnerable Software and Affected Versions Newsletter Subscription Form – User Subscriptions Form, Capture Email versions prior to 1.6.0 Description An unauthenticated SQL Injection exists in the plugin due to insufficient escaping of user-supplied parameters and a lack of proper...