EUVD-2026-60560

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75086 itsourcecode Hospital Management System viewroom.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

Countersoft Gemini 7.3.0 SQL Injection / Remote Code Execution

Countersoft Gemini version 7.3.0 contains an authenticated SQL injection vulnerability in the custom field lookup functionality. An attacker with valid credentials can inject stacked SQL queries through the term parameter and, when the application uses a privileged SQL Server account, enable...

PT-2026-77288

Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta Description A remote SQL injection exists within the Move Operations component, specifically in the ModuleController.java file. The issue occurs when the sourcePath argument is...

PT-2026-76965

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select with multiple condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

CVE-2026-74015: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

CVE-2026-54348: Improper Neutralization of Special Elements used in an SQL Command

Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controlled ipaddress array and store it as JSON in paneladmins.ip without enforcing numeric element types. When the poisoned...

PT-2026-77058

Name of the Vulnerable Software and Affected Versions Depicter Slider versions prior to 4.8.1 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

CVE-2026-73355: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...

CVE-2026-73345: Improper Neutralization of Special Elements used in an SQL Command

Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...

CVE-2026-73339: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

CVE-2026-73187: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

CVE-2026-32466: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Gravity Forms Bookings premium = 2.1 versions...

CVE-2026-75778: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

CVE-2026-75089: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-75088: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...

CVE-2026-75087: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

CVE-2026-75086: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-75080: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editsubject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-75079: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editsubject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...