EUVD-2026-62930

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom list retrieval in a playbook, allowing for create, read, update, and delete operations on a...

EUVD-2026-62929

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom function results, allowing for reading all relevant data stored in the Splunk SOAR database...

EUVD-2026-62908

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

EUVD-2026-63116

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structured Query Language SQL through the Representational State Transfer REST API, causing Splunk Enterprise to evaluate...

EUVD-2026-63188

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy/orderFormat results in sql injection. It is possible to...

CVE-2026-76785

In amirsanni's Mini-Inventory-and-Sales-Management-System 0.1, the Transaction::getAll method in application/models/Transaction.php concatenates the orderBy/orderFormat arguments directly into SQL queries, enabling remote SQL injection. The project maintainer has not responded to the early issue ...

CVE-2026-76785 amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy/orderFormat results in sql injection. It is possible to...

CVE-2026-76762

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

CVE-2026-76783

DeDeCMS 53_1_UTF8 is affected by a SQL injection vulnerability in the file /plus/advancedsearch.php , triggered by manipulation of the sql argument. The attack is remote and requires no authentication or user interaction. CVSS 3.1 scores this 7.3 (HIGH) with low impact on confidentiality, integri...

CVE-2026-76783 DeDeCMS advancedsearch.php sql injection

A security vulnerability has been detected in DeDeCMS 531UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument sql leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...

EUVD-2026-63187

A security vulnerability has been detected in DeDeCMS 531UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument sql leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

EUVD-2026-63186

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

CVE-2026-76764

code-projects Employee Management System 1.0 is vulnerable to SQL injection via the mailuid argument in /process/aprocess.php (Admin Login Endpoint). CVSS 7.3 HIGH. Exploit proof-of-concept published; no patch version provided. Exploitation details not available in provided documents.

PT-2026-78942

Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...

PT-2026-79043

Name of the Vulnerable Software and Affected Versions Apache InLong versions 2.0.0 through 2.3.x Description An SQL injection issue exists where improper neutralization of special elements in an SQL command allows an attacker to inject arbitrary SQL code. This is achieved through string...

PT-2026-79206

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description An issue involving improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network...

PT-2026-79184

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 3.0.23 Description Authenticated moderators can perform SQL injection through the meetingId and userId variables used by the refreshBreakoutRoomsVisibleForUsers function in the BreakoutRoomUserDAO.scala file. Th...

PT-2026-79270

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...