EUVD-2026-98920

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2026-109620 SourceCodester Online Reviewer System index.php prepare sql injection

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2026-109607 SourceCodester Online Exam System Login Endpoint loginExe.php sql injection

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

EUVD-2026-98851

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

CVE-2026-109607

A SQL injection vulnerability exists in SourceCodester Online Exam System 1.0 within the Login Endpoint component. Specifically, an unknown function in the file adminpanel/admin/query/loginExe.php fails to properly neutralize inputs for the username/pass arguments. This flaw allows for remote att...

EUVD-2026-98840

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...

CVE-2026-109606

The SourceCodester Art Gallery Management System 1.0 is vulnerable to a SQL injection flaw within the Account Creation component. Specifically, the Action::save_user function in the admin/admin_class.php file fails to properly neutralize the Name argument. This vulnerability allows for remote exp...

CVE-2026-109606 SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...

CVE-2026-109606 SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...

ntbyk JTL-Connector for WooCommerce SQL injection vulnerability

The ntbyk JTL-connector for WooCommerce versions 2.4.3 and earlier has a SQL injection vulnerability. This vulnerability stems from insufficient escaping of user-provided parameters and inadequate preparation of existing SQL queries. Unverified attackers can append additional SQL queries to...

WordPress Calendar SQL Injection Vulnerability

Versions of WordPress Calendar prior to 7.37.0 have a SQL injection vulnerability. This vulnerability arises due to improper handling of special elements in SQL commands, which may lead to SQL injections...

Hyyan WooCommerce Polylang Integration SQL Injection Vulnerability

Hyyan WooCommerce Polylang Integration 1.5.0 and earlier versions have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the variationid parameter in the woocommerceremovevariations AJAX operation, as well as inadequate preparation of existing SQL queries. This...

HPE NonStop TSQLEXE SQL injection vulnerability

The HPE NonStop TSQLEXE T9193L01^AIP and earlier versions, as well as the T9193L02 version, contain an SQL injection vulnerability. This vulnerability stems from specially crafted SQL queries and may lead to application crashes...

CVE-2026-109523

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

CVE-2026-109521

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

CVE-2026-109522

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.8.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Taoufik El Adel in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.8.0...

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.8.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by andrea bocchetti in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.8.0...

CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

EUVD-2026-98776

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...