287074 matches found
PT-2026-104722
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-88395
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
CVE-2026-88395
The software GouGuOA version v6.0.5 and before is vulnerable to an SQL Injection flaw located in the /home/message/rubbish endpoint. The vulnerability is triggered via the keywords parameter , which fails to properly neutralize special elements used in SQL commands (CWE-89). This flaw could allow...
CVE-2026-88397
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
CVE-2026-88397
The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...
EUVD-2026-92467
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
EUVD-2026-92469
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
PT-2026-106016
Name of the Vulnerable Software and Affected Versions ApiAdmin versions prior to 5.1 Description SQL Injection occurs in the user-list endpoint "/admin/User/getUsers" through the gid parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for executio...
PT-2026-106006
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
PT-2026-106009
Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla CCK versions prior to 8.3.16 Description An unauthenticated SQL injection exists because the order column for records is user-provided and not properly validated. This allows an attacker to manipulate database queries via the...
CVE-2026-88424
FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...
CVE-2026-88395
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
EUVD-2026-92704
FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...
PT-2026-106268
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...
PT-2026-106075
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
PT-2026-106169
Name of the Vulnerable Software and Affected Versions WP BASE Booking versions prior to 6.4.1 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database tr...
PT-2026-106041
A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient info.php. Performing a manipulation of the argument patient id results in sql injection. The attack is possible to be carried out remotel...
PT-2026-106059
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transaction details.php. Executing a manipulation of the argument transaction id can lead to sql...
PT-2026-106040
Name of the Vulnerable Software and Affected Versions onetwothreeneth HospitalManagementSystem versions prior to 9ef91ed6007314b6473110ed699dff76d158f61d Description A remote SQL injection exists in the file php/controller.php. This occurs when the transaction idS argument is manipulated, allowin...
PT-2026-106176
Name of the Vulnerable Software and Affected Versions feelec-yishu feelcrm-os version 1.0.0 Description A remote SQL injection exists in the Member Endpoint component. The issue occurs within the index function of the file App/Feelcrm/Index/Controller/MemberController.class.php when the group id...