EUVD-2026-95338

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

CVE-2026-51936

A flaw was found in SQLCipher. An attacker with local access can bypass defensive security restrictions and cause database corruption by supplying a crafted source database name to the sqlcipherexport function. Because defensive restrictions are temporarily relaxed during export operations,...

CVE-2026-86677 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...

CVE-2026-39914 TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashboard Export Endpoint

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit unauthorized SQL queries to the export...

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in CaptureChangeMySQL. An attacker can execute unauthorized SQL commands by crafting malicious table names. Note: This is only exploitable if CaptureChangeMySQL is enabled and used in the...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-38211)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter stockname1 within the file/checkcustomerdetails.php. Attackers...

CVE-2025-59922

An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an...

CVE-2025-59922: Improper Neutralization of Special Elements used in an SQL Command

An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an...

EUVD-2017-3937

Malware in sbrugna...

EUVD-2007-1086

Malware in sbrugna...

E-Commerce Website admin_index_search.php file SQL injection vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /pages/adminindexsearch.php. An attacker can exploit this vulnerability t...

SQL Injection Vulnerability in Computer Sales and Inventory System

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within t...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38223)

Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/manageuser.php. Attackers can exploit...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38219)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters of the...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38220)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter idd found i...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38227)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter Username...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38231)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletereceiving...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38232)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the parameter ID of the...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38233)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=saveproduct...