284196 matches found
CVE-2026-105412
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database...
CVE-2026-108824
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-108826
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...
CVE-2026-108828
A SQL injection vulnerability exists in Zen Cart 2.2.2 within the Admin Panel component. The flaw resides in the eval function of the admin/configuration.php file, where manipulation of the gID argument allows for remote attack initiation. While the attack is considered to have high complexity an...
CVE-2026-108828 Zen Cart Admin Panel configuration.php eval sql injection
A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to ha...
EUVD-2026-97335
A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to ha...
WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Aarush Gaur in WordPress Plugin Modern Events Calendar Lite versions 7.37.0...
CVE-2026-105412 SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database...
EUVD-2026-97332
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database...
CVE-2026-105412
An SQL Injection vulnerability exists in Tuleap Enterprise Edition 17.5 . This flaw could allow an attacker with LOW privileges to gain read access to the Tuleap database. While the technical root cause is not specified, the vulnerability is categorized under CWE-89 (Improper Neutralization of Sp...
CVE-2026-108826 Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...
EUVD-2026-97330
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...
CVE-2026-108826
A SQL injection vulnerability exists in Zen Cart up to version 2.2.2 . The flaw is located in the PayPal IPN Handler component, specifically within the zen_db_perform function in the includes/modules/payment/paypaldp.php library. An attacker can initiate this attack remotely by manipulating the t...
CVE-2026-108826 Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...
CVE-2024-51818
CVE-2024-51818 Fancy Product Designer = 6.4.3 - Unauthenticated SQL Injection Description The Fancy Product Designer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2026-108821
A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...
CVE-2026-108824 DataEase Utils.java Utils.buildCalcField sql injection
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-108824 DataEase Utils.java Utils.buildCalcField sql injection
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-108824
The DataEase application, version up to 3.0.0 , is vulnerable to a SQL injection flaw within the Utils.buildCalcField function located in the io/dataease/engine/utils/Utils.java file. An attacker can remotely manipulate the calculated field argument to execute unauthorized SQL commands. Exploitat...
EUVD-2026-97322
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been...