245991 matches found
MantisBT < 2.28.4 Multiple Vulnerabilities
The version of MantisBT installed on the remote host is prior to 2.28.4. It is, therefore, affected by multiple vulnerabilities: - A SQL injection vulnerability exists in core/historyapi.php. The historyorder configuration value is concatenated directly into a SQL ORDER BY clause without any...
PT-2026-66393
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
PT-2026-66577
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show price by pdtId.php...
CVE-2025-65336
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-69937
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
EUVD-2025-210553
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...
CVE-2025-69933
CodeAstro Membership Management System 1.0 is vulnerable to an SQL Injection flaw within the /memberProfile.php?id=1 endpoint. The vulnerability stems from the Improper Neutralization of Special Elements used in an SQL Command , which can result in a total technical impact. A Proof of Concept (Po...
CVE-2025-69947
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...
CVE-2025-69941
The SourceCodester Tailor Management System version 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements. The vulnerability exists in the addmeasurement.php endpoint via the id parameter, which allows an attacker to insert and execute malicious SQL statements. Pra...
EUVD-2025-210555
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
PT-2026-66587
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, in the 'renew.php' endpoint via the membershipTy...
PT-2026-66411
Name of the Vulnerable Software and Affected Versions Plesk affected versions not specified Description Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection, which is a technique used to manipulate database queries. This allow...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
EUVD-2025-210561
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2025-65336
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-69937
CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the id parameter . This vulnerability potentially allows an attacker to insert malicious SQ...