EUVD-2026-109564

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062

A security flaw exists in SourceCodester Performance Indicator System 1.0 involving a SQL injection vulnerability. The issue is triggered by the manipulation of the Contact argument during processing of the file /opils/staff/save_profile.php. This vulnerability can be exploited remotely to compro...

CVE-2026-116060

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

EUVD-2026-109563

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116061

The SourceCodester Performance Indicator System 1.0 is vulnerable to a SQL injection vulnerability within the /opils/staff/edit_dealer.php file. The flaw is caused by the improper handling of the Contact argument, allowing an attacker to execute malicious SQL commands. This attack can be initiate...

CVE-2026-116061 SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-116060

The SourceCodester Performance Indicator System 1.0 is susceptible to a remote SQL injection vulnerability. The flaw exists within an unspecified section of the /opils/staff/adddealer.php file, where improper neutralization of the Contact argument allows for malicious manipulation. This vulnerabi...

EUVD-2026-109555

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

Exploit for CVE-2026-112866

CVE-2026-112866 - Product Filter by WBW Unauthenticated SQL In...

CVE-2026-116055

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the forcedDate parameter in includes/services/PageManager.php, where user-supplied input is interpolated directly into an SQL INSERT statement without validation. An attacker can inject arbitrary SQL by supplying a...

CVE-2026-116055

The SourceCodester Performance Indicator System 1.0 is vulnerable to an SQL injection vulnerability within an unknown function of the /opils/admin/deleteproduct.php file. By manipulating the ID argument, a remote attacker can execute arbitrary SQL commands. The documents state that the exploit is...

CVE-2026-116055 SourceCodester Performance Indicator System deleteproduct.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be...

EUVD-2026-109547

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be...

CVE-2026-116211

YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save, where the datemajfiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT statement. Unauthenticated attackers on default installs can inject a sub-SELECT against wikiusers to...

CVE-2026-116207

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...

CVE-2026-116170

SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content,...