PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection

PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection blind via the sbcategory parameter. id: CVE-2021-36748 info: name: PrestaHome Blog for PrestaShop 1.7.8 - SQL Injection author: whoever severity: high description: PrestaHome Blog for PrestaShop prior to versio...

Layer5 Meshery 0.5.2 - SQL Injection

Layer5 Meshery 0.5.2 contains a SQL injection vulnerability in the REST API that allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint order parameter in GetMesheryPatterns in models/mesherypatternpersister.go. id: CVE-2021-31856 info: name: Layer5 Meshe...

MetInfo 7.0.0 beta - SQL Injection

MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. id: CVE-2019-17418 info: name: MetInfo 7.0.0 beta - SQL Injection author: ritikchaddha severity: high description: | MetInfo...

Joomla! Core SQL Injection

A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands. id: CVE-2015-7297 info: name: Joomla! Core SQL Injection author: princechaddha severity: high description: A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote...

Jeecg-boot 3.5.0 qurestSql - SQL Injection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. id: CVE-2023-1454 info: name: Jeecg-boot 3.5...

Ivanti EPM - Remote Code Execution

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. id: CVE-2024-29824 info: name: Ivanti EPM - Remote Code Execution author: DhiyaneshDK severity: critical description: | ...

PuneethReddyHC action.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input. id: CVE-2021-41648 info: name: PuneethReddyHC action.php SQL Injection author: daffainfo severity: high descriptio...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

CVE-2026-105181

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located in the processing of the register1.php file, where manipulating the fname argument allows for remote exploitation. While the specific processing logic is not detailed in the documents, the v...

CVE-2026-105181 itsourcecode Online Admission System register1.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

EUVD-2026-92177

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

POC-CVE-2026-58048

CVE-2026-58048 CVSS 4.0: 9.4 Crítico | CWE-89: Inyección SQL | NVD Un usuario autenticado de cPanel → SQL arbitrario como root de MySQL mediante el renombrado de bases de datos. cPanel conserva incorrectamente el sqlmode de la sesión del usuario ANSIQUOTES al ejecutar operaciones de renombrado co...

CVE-2022-3689

Informe de análisis de CVE-2022-3689 Resumen CVE-2022-3689 es una vulnerabilidad de inyección SQL descubierta en un plugin específico de WordPress, que permite a un atacante aprovechar la vulnerabilidad de seguridad de la aplicación web para insertar código SQL malicioso en la base de datos. Esto...

CVE-2024-9326-PoC

Script PoC del exploit CVE-2024-9326 Este script PoC está diseñado para verificar la presencia de CVE-2024-9326, una vulnerabilidad de inyección SQL de severidad alta en PHPGurukul Online Shopping Portal v2.0. Automatiza el proceso de explotación para determinar si la aplicación web objetivo es...

EUVD-2026-92163

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqlirealescapestring of the file /Admin/addsymptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It is...

CVE-2026-105178

A security flaw exists in SourceCodester Drug Recommendation System 1.0 within the Symptom Creation component. The vulnerability is located in the mysqli_real_escape_string function of the /Admin/add_symptom.php file. By manipulating the txtname argument, an attacker can perform a SQL injection a...

CVE-2026-105175

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

EUVD-2026-92162

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

CVE-2026-105177 SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...