260344 matches found
WordPress Quiz and Survey Master (QSM) plugin <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option vulnerability
Authenticated Contributor+ SQL Injection via 'randoncategory' Quiz Option vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Quiz And Survey Master versions = 11.2.1...
WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Denver Jackson in WordPress Plugin Super Store Finder versions = 7.8...
WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability
SQL Injection vulnerability discovered by 20kilograma in WordPress Plugin Affiliates Manager versions = 2.9.53...
WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Sticky Chat Widget versions = 1.4.2...
Exploit for SQL Injection in Piccolo-Orm Piccolo
No d...
ZeroDay vulnerabilities are exploited in GeoTools through OpenGeo
GeoTools, a widely used open-source Java library for geospatial data, has released updates to address the ZeroDay SQL injection vulnerability in the execution of OGC filter functions when used with JDBCDataStore and other data stores. This vulnerability is an older one, and it has recently been...
WordPress NEX-Forms plugin <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability
Authenticated Admin+ SQL Injection via 'additionalparams' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin NEX-Forms versions = 9.2.4...
WordPress Fullscreen Galleria plugin <= 1.6.12 - Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content vulnerability
Authenticated Contributor+ SQL Injection via 'href' Attribute in Post Content vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Fullscreen Galleria versions = 1.6.12...
WordPress WPML Multilingual CMS plugin <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter vulnerability
Authenticated Translator+ SQL Injection via 'sorting' Parameter vulnerability discovered by momopon1415 in WordPress Plugin Multilingual CMS versions = 4.9.5...
SafeLine v9.4.0
SafeLine - Make your web apps secure ๐ Website | ๐ Docs | ๐ Live Demo | ๐โโ๏ธ Discord | ไธญๆ็ ๐ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
Perfex-CRM-3.4.x-Unauthenticated-RCE-via-Migration-SQLi-Arbitrary-File-Upload
Perfex CRM Note: The Migration controller requires migra...
CVE-2026-75088
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-75089
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75087
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...
CVE-2026-75086
A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2026-75089
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75089 PHPGurukul Complaint Management System check_availability.php sql injection
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75089 PHPGurukul Complaint Management System check_availability.php sql injection
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75089
PHPGurukul Complaint Management System 1.0 is affected by a SQL injection vulnerability in the file user/check_availability.php, triggered by manipulation of the email parameter. The vulnerability allows remote, unauthenticated exploitation over the network with low complexity. A public proof-of-...
EUVD-2026-60563
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...