260503 matches found
CVE-2026-19899
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /editteacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...
CodeAlpha_SecureCodingReview
Secure Coding Review — MiniBank A complete secure code review...
CVE-2026-19899
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /editteacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-19899
CVE-2026-19899 affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability is in an unknown function within the file /edit_teacher.php, where manipulating the argument ID can cause an SQL injection. It is described as exploitable remotely with a publicly disclosed exploit (PoC...
CVE-2026-19899 SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /editteacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-19899 SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /editteacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...
EUVD-2026-59773
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /editteacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-19894
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...
CVE-2026-12248
The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2026-19894
The CVE-2026-19894 entry concerns itsourcecode Hospital Management System 1.0. Affected is an unknown function in /viewmedicine.php where manipulating the delid parameter yields a SQL injection. This can be triggered remotely, and public exploits exist. Connected sources corroborate an attacker-c...
EUVD-2026-59746
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...
CVE-2026-19894 itsourcecode Hospital Management System viewmedicine.php sql injection
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...
CVE-2026-19894 itsourcecode Hospital Management System viewmedicine.php sql injection
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...
EUVD-2026-59608
The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2026-12248 WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2026-12248 WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2026-12248
The CVE-2026-12248 entry concerns the WPML Multilingual CMS WordPress plugin. Affected software: WPML (SitePress Multilingual CMS) for WordPress, up to version 4.9.5. Vulnerability class: SQL Injection via the sorting parameter, caused by insufficient escaping of user-supplied input and lack of s...
Exploit for SQL Injection in Metabase
CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection...
