EulerOS 2.0 SP11 : mariadb-connector-c (EulerOS-SA-2026-4254)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...

CVE-2026-108927: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-108821: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

PT-2026-110899

Name of the Vulnerable Software and Affected Versions itsourcecode Baptism Information Management System version 1.0 Description A remote SQL injection flaw exists in the ebaptism.php file. This issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL comman...

PT-2026-110476

Name of the Vulnerable Software and Affected Versions krupalshah EmployeeRecruitmentSystem versions up to 922ff6d208278282e7c8e36d70d9ae356adec9fe Description A remote SQL injection exists within the Forgot Password Handler component. The issue occurs in the mysql query function located in the...

PT-2026-110910

Name of the Vulnerable Software and Affected Versions itsourcecode Online Admission System version 1.0 Description An issue exists in the processing of the /admin/sum.php endpoint. Remote manipulation of the ID argument allows for SQL injection, a technique where malicious SQL statements are...

PT-2026-110909

Name of the Vulnerable Software and Affected Versions itsourcecode Baptism Information Management System version 1.0 Description A SQL injection flaw exists in the pbaptism.php file. This issue occurs when the b id argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

CVE-2026-108826: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...

PT-2026-110634

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 3.0.2patch3 Description An issue exists in the XML-RPC component within the userLogin function of the xmlrpc.php file. This flaw allows a remote attacker to perform SQL injection, which is a technique used to...

CVE-2026-109663: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive informati...

CVE-2026-109649: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive...

CVE-2026-109648: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying...

CVE-2026-109639: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to...

CVE-2026-109638: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from...

CVE-2026-108781: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of th...

CVE-2026-108928: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-108926: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-108813: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMSDownload.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about th...

CVE-2026-108807: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be...

CVE-2026-108799: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument...