PT-2026-116541

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file exammanger.php of the component AJAX Endpoint. The manipulation of the argument subject results in sql injection. The...

CVE-2026-110895: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54...

PT-2026-116539

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQLDB::noresults/MySQLDB::getExams/MySQLDB::latestExamID/MySQLDB::getreport of the file...

stirling-h2-import-leftover

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-111866 nemoTyrant manong func.php arr2sql sql injection

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/delcache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...

CVE-2026-111866 nemoTyrant manong func.php arr2sql sql injection

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/delcache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...

CVE-2026-111866

A SQL injection vulnerability exists in nemoTyrant manong affecting the cache/del_cache/arr2sql function within the func.php file. An attacker may initiate this attack remotely to manipulate the database. Due to a rolling release model, specific affected version numbers are not provided, though t...

Ravi Teja Online-Examination-System Input Verification Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the incorrect handling of the topicid parameter in the Exam::startExam function within the exam.php file in the Exam Module component. This could lead to SQL injection attacks, and attackers could...

WordPress Booktics SQL Injection Vulnerability

WordPress Booktics versions 1.0.29 and earlier have a SQL injection vulnerability. This vulnerability arises due to improper handling of special elements in SQL commands, which may lead to SQL injections...

Ravi Teja Online-Examination-System Input Verification Error Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from incorrect operations with parameters in the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php, specifically query/qtype/sortname/sortorder. This could lead to SQL injection attacks...

JEECG official open-source JeecgBoot AI low-code platform has a SQL injection vulnerability.

The JEECG official open-source JeecgBoot AI low-code platform versions prior to 3.9.5 have a SQL injection vulnerability. This vulnerability stems from improper handling of newline characters when processing dictionary and online report SQL fragments. Certified attackers can bypass the...

Ravi Teja Online-Examination-System Input Verification Error Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the improper handling of parameters in the exammanger.php file within the AJAX Endpoint component’s MySQLDB::topicslist function. It may lead to SQL injection attacks...

DevItems Support: Genix SQL Injection Vulnerability

DevItems Support Genix versions 1.4.54 and earlier have a SQL injection vulnerability. This vulnerability arises from improper neutralization of special elements in SQL commands, which may lead to SQL injections...

nemoTyrant manong input validation error vulnerability

nemoTyrant manong has a security vulnerability. This vulnerability stems from operational issues with the functions cache/delcache/arr2sql in the func.php file. It may lead to SQL injection attacks, and attackers could launch attacks remotely...

Ravi Teja Online-Examination-System Input Verification Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from incorrect handling of parameters “id” and “topic” in the file results.php/include/database.php. It may lead to SQL injection attacks, and the attacks can be initiated remotely...

Kishan Lal Hospital Management System: Input validation error vulnerability

The Kishan Lal Hospital Management System has a security vulnerability. This vulnerability stems from the incorrect handling of the parameter ID in the mysqliquery function of the Appointment Cancellation Handler component, which may lead to SQL injection...

CLSA-2026-1792238249 dovecot: Fix of 5 CVEs

CVE-2026-40018: fail MySQL string escaping and SQL passdb lookups while not connected instead of escaping without the connection charset; SQL userdb lookups and dict-sql updates also fail temporarily while not connected...

Exploit for SQL Injection in Apache Log4J

CVE-2022-23305 Lab nghiên cứu, pin Apache Log4j 1.2.17 và JD...

portswigger-labs-writeups

PortSwigger Labs — Write-ups & Solutions Personal write-up re...

CVE-2026-104122

The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks...