PT-2026-123327

Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccounts REST endpoint. Attackers with only societe/creer permission can break out of the unescaped type value in...

PT-2026-123426

Name of the Vulnerable Software and Affected Versions @aws-cdk/aws-redshift-alpha versions prior to 2.274.0-alpha.0 Description SQL injection exists in the database-query custom resource handlers. A third party capable of influencing construct property values can execute SQL statements with Amazo...

PT-2026-123158

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

EUVD-2026-109964

SQL Injection vulnerability in CRM SOFTTRADE Infotech aka softtradeindia 1.0 allows a remote attacker to execute arbitrary code via the Login Page...

PT-2026-123263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0...

PT-2026-125523

OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL through the projectId parameter of the /live/visitors/:projectId WebSocket, which lacks session and project-access checks. Attackers can use UNION or boolean count...

PT-2026-123353

Name of the Vulnerable Software and Affected Versions CRM SOFTTRADE Infotech version 1.0 Description A SQL Injection issue exists in the login page. A remote attacker can inject SQL commands through the login form to execute arbitrary code on the affected system. SQL Injection is a technique wher...

WordPress Product Filter by WBW 3.4.6 SQL Injection

WordPress Product Filter by WBW versions through 3.4.6 contain an unauthenticated SQL injection vulnerability in the frontend filter AJAX flow. The proof of concept demonstrates attacker-controlled temporary-table identifier handling using a structural response oracle...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

CVE-2025-32429

CVE-2025-32429 XWiki SQL Injection PoC Author: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerability: Blind SQL Injection in XWiki LiveData REST API Affected File: getdeleteddocuments.vm sort parameter Description : A blind SQL Injection vulnerability exists in XWiki Platform’s...

CVE-2026-116061

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116062

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-109564

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062

A security flaw exists in SourceCodester Performance Indicator System 1.0 involving a SQL injection vulnerability. The issue is triggered by the manipulation of the Contact argument during processing of the file /opils/staff/save_profile.php. This vulnerability can be exploited remotely to compro...

CVE-2026-116060

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

EUVD-2026-109563

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116061

The SourceCodester Performance Indicator System 1.0 is vulnerable to a SQL injection vulnerability within the /opils/staff/edit_dealer.php file. The flaw is caused by the improper handling of the Contact argument, allowing an attacker to execute malicious SQL commands. This attack can be initiate...

CVE-2026-116061 SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...