oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php has a security vulnerability. This vulnerability stems from improper handling of parameters such as name, parentid, id, type, folderid, and description in the savefolder, deletefolder, deletefile, filerename, and savefiles functions within the adminclass.p...

PT-2026-120554

A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqli query of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...

oretnom23 php-travel-agency-system input validation error vulnerability

The oretnom23 php-travel-agency-system contains a security vulnerability stemming from improper handling of parameters costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid in the file admin/delete.php. This may lead to SQL injection attacks...

PT-2026-120667

A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save user of the file admin class.php of the component User Account Management. The manipulation of the argument name/username/password/type/id...

PT-2026-120815

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within the '/deleteproduct.php' endpoint. SQL injection is a technique where an attacker inserts...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the fid/id parameter in the files.php component within the File Management module, potentially leading to SQL...

WordPress Ajax Search Lite SQL injection vulnerability

WordPress Ajax Search Lite versions 4.14.6 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

CVE-2015-20128

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...

CVE-2015-20128

FooSun DotNetCMS 1.0 and 2.0 are affected by an SQL injection vulnerability. The flaw resides in the CityId parameter, where unauthenticated attackers can send GET requests to /user/City_ajax.aspx containing UNION SELECT payloads. Because the input is concatenated unsanitized into the sys_City qu...

EUVD-2015-9432

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...

CVE-2015-20128 FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...

CVE-2026-113608

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

itsourcecode sales-and-inventory-system input validation error vulnerability

The itsourcecode sales-and-inventory-system has a security vulnerability stemming from improper handling of the ID parameter in the /pages/custedit.php file, which may lead to SQL injection...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php has a security vulnerability. This vulnerability stems from improper handling of the name, username/password/type/id parameters in the saveuser function within the adminclass.php file of the User Account Management component. It may lead to SQL injection,...

itsourcecode sales-and-inventory-system input validation error vulnerability

The itsourcecode sales-and-inventory-system contains a security vulnerability stemming from improper handling of the ID parameter in the /pages/custdel.php file, which may lead to SQL injection...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the dateto/datefrom parameters in the mysqliquery function within the file reportsearch.php, potentially leading to SQL injection...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder has a SQL injection vulnerability, which arises due to improper handling of special elements used in SQL commands, potentially leading to SQL injections...

oretnom23 php-travel-agency-system input validation error vulnerability

The oretnom23 php-travel-agency-system contains a security vulnerability stemming from improper handling of parameters action/fullname/visano/hiden/title/description/pageid/user in the admin/update.php file. This may lead to remote SQL injection attacks...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the rollnumber parameter by the mysqliquery function in the file individualreportsearch.php, potentially leading to SQL injection...