CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112

A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX अगस्त 2025 में, FreePBX Endpoint मॉड्यूल में एक गंभीर भेद्यता का खुलासा हुआ। CVE-2025–57819 एक अनधिकृत हमलावर को Endpoint मॉड्यूल में SQL इंजेक्शन का दोहन करने और, डेटाबेस हेरफेर और निर्धारित कार्य निष्पादन की श्रृंखला के माध्यम से, रिमोट कोड निष्पादन प्राप्त करने की अनुमति...

CVE-2026-78056

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78057

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-78057 sambitraj Student-Management-System Management Mutation sql injection

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

EUVD-2026-64623

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-78057

sambitraj Student-Management-System (up to commit 56ba287) is vulnerable to SQL injection in the Management Mutation Handler component. Manipulating the arguments roll_no, name, father_name, class, mobile, email, password, or remark allows a remote, authenticated attacker to inject SQL queries. T...

EUVD-2026-64621

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78056

sambitraj Student-Management-System (up to commit 56ba287) contains a SQL injection vulnerability in the Dashboard component. Manipulation of the roll_no or teacher_name argument allows a remote, authenticated attacker to inject SQL queries. The exploit is public and classified as proof-of-concep...

PT-2026-79765

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

PT-2026-79785

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

POC-GeoLeak-CVE-2026-52715

GeoLeak — CVE-2026-52715 का PoC GeoLeak CVE-2026-52715 की शैक्षिक Proof of Concept, WordPress के लिए GEO my WordPress = 4.5.5 प्लगइन में अनधिकृत SQL इंजेक्शन CVSS 9.3। मानचित्र सीमाओं के swlatlng और nelatlng पैरामीटर WHERE क्लॉज में बिना सैनिटाइज़ किए इंटरपोलेट होते हैं। स्व-निहित Docker लैब +...

CVE-2024-46532

CVE संख्या: CVE-2024-46532 विक्रेता: 上海顶想信息科技有限公司https://www.kancloud.cn/ उत्पाद: 互联网医疗系统医疗门诊OpenHIS संस्करण: V1.0 प्रभावित घटक: https://github.com/1638824607/OpenHIS?tab=readme-ov-file OpenHIS में SQL इंजेक्शन भेद्यताओं का पुनरुत्पादन भेद्यताएँ：...

CVE-2020-28413_Mantis2.24.3-SQLi-SOAP

इस रिपॉजिटरी में README नहीं है।...

CVE-2024-12270

CVE-2024-12270 ब्यूटीफुल टैक्सोनॉमी फिल्टर्स = 5.1 AND string error-based - WHERE, HAVING, ORDER BY or GROUP BY clause UPDATEXML' injectable POST parameter 'selects0term' is vulnerable. Do you want to keep testing the others if any? y/N n Ghauri identified the following injection points with a...

CVE-2026-76602

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

CVE-2026-76571

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → रूट CVE-2025-57819 के लिए पूर्ण-श्रृंखला PoC। FreePBX के एंडपॉइंट मॉड्यूल में अप्रमाणित त्रुटि-आधारित SQL इंजेक्शन, क्रॉन जॉब इंजेक्शन और इनक्रोन विशेषाधिकार वृद्धि के माध्यम से रूट शेल में बदल जाता है। केवल अधिकृत परीक्षण और अनुसंधान के लिए। उन सिस्टमों के...

CVE-2024-13481

CVE-2024-13481 LTL Freight Quotes – R+L Carriers Edition = 3.3.4 - Injection SQL non authentifiée Description Le plugin LTL Freight Quotes – R+L Carriers Edition pour WordPress est vulnérable à une injection SQL via les paramètres 'editid' et 'dropshipeditid' dans toutes les versions jusqu'à la...