264427 matches found
CVE-2026-111852
The WPdreams Ajax Search Lite plugin for WordPress is vulnerable to a Blind SQL Injection flaw in versions 4.14.6 and earlier . The root cause is the improper neutralization of special elements used in an SQL command, which allows an attacker to execute malicious queries. No specific remediation ...
EUVD-2026-107273
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6...
CVE-2026-114243
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...
CVE-2026-114242
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
CVE-2026-114243
A security flaw exists in the dhikshitha29 Insurance-Management-System within the mysqli_query function of the /Agent/ManagePolicy/EditPolicyHolder.php file. Remote attackers can perform an SQL injection by manipulating the Policy_no/Name arguments. While the project utilizes a rolling release st...
EUVD-2026-107225
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...
CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...
CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...
CVE-2026-114242 dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
CVE-2026-114242
A SQL injection vulnerability exists in the dhikshitha29 Insurance-Management-System (commit 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837). The flaw is located in the mysqli_query function within the /Admin/View/editPlan.php file, where a lack of proper saniti...
CVE-2026-114242 dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
EUVD-2026-107179
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 + CVE-2026-60137 — WP2Shell Exploit WordPres...
BIT-MYSQL-CLIENT-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...
BIT-MARIADB-MIN-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...
BIT-MARIADB-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...
WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...
WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by leon figueira in WordPress Plugin GamiPress versions = 8.0.7...
CVE-2026-92997
The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...
CVE-2026-92998
The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks...