PT-2026-116505

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del cache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...

SLiMS 9.8.0 Admin Bibliography SQL Injection

SLiMS version 9.8.0 contains an SQL injection vulnerability in its admin bibliography module via unquoted opachide and promoted GET parameters, allowing authenticated staff users to extract database information. https://packetstorm.news/download/236103...

SLiMS 9.8.0 SQL Injection

SLiMS version 9.8.0 contains SQL injection vulnerabilities in the serial control subscription and reporting detail administration modules. The supplied proof of concept demonstrates authenticated error-based database version disclosure through unquoted numeric parameters...

Apache Log4j 1.2.17 JDBCAppender SQL Injection

Apache Log4j version 1.2.17 JDBCAppender contains an SQL injection vulnerability when an unescaped logging message is embedded in a JDBCAppender SQL pattern. This package provides an isolated H2 proof of concept and whitebox data-flow report. https://packetstorm.news/download/236092...

CVE-2026-55796

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...

EUVD-2026-103172

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...

CVE-2026-55796

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...

CVE-2026-55796 Frappe HR: SQL Injection in HRMS Salary Payments via ECS Report

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...

CVE-2026-55796

Frappe HR, an open-source human resources management solution, contains a SQL Injection vulnerability in the Salary Payments via ECS report component. The flaw exists because the application constructs report conditions using unsafe SQL string interpolation . An authenticated HR user can supply c...

CVE-2026-55796 Frappe HR: SQL Injection in HRMS Salary Payments via ECS Report

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...

Exploit for SQL Injection in Wordpress

🚀 CVE-2026-60137 - WordPress Core Critical SQL Injection SQLi...

CVE-2026-111718

AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and...

CVE-2026-111700

WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/enUS/eql, escaping the unsanitized EqlBuilder SQL...

CVE-2026-111685

IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/findresourcebynum. Attackers can append SQL after the LIMIT clause concatenated via QueryWrapper.last to extract databa...

CVE-2026-111686

IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract...

CVE-2026-111669

ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attackers to manipulate the ORDER BY clause by supplying a crafted PagerInfo.Sort query parameter to the shared ToPage paging helper. Attackers holding the system:user:list permission can inject subquery ...

CVE-2026-111634

Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to...

CVE-2026-111619

FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and...

CVE-2026-86047

A flaw was found in MariaDB, which can lead to SQL injection and privilege escalation. The SHOW CREATE SERVER and SHOW CREATE USER commands, as well as the mariadb-dump utility, do not properly quote identifiers and values when serializing SQL data. An authenticated, low-privileged attacker can...

EUVD-2026-103010

AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and...