13473 matches found
CVE-2026-116318
A flaw was found in PostgreSQL's pgdump utility. An authenticated database user with permission to create objects can trigger a SQL injection vulnerability by defining an inherited column with a child-local constraint whose name requires quoting. When the resulting database dump is restored, this...
CVE-2026-116316
A flaw was found in PostgreSQL. An authenticated database user can achieve privilege escalation and execute arbitrary SQL commands with the permissions of another session. By defining a custom data type in a temporary schema pgtemp, an attacker can cause a victim's security-restricted operation t...
CVE-2023-50070
CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...
CVE-2024-40443
CVE-2024-40443 CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands...
TurboMeeting - Boolean-based SQL Injection
A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...
EUVD-2026-122981
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2026-121900
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2026-121894
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2026-121900 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2026-121900
Adobe Connect is affected by an SQL Injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A low-privileged attacker can exploit this flaw to execute arbitrary SQL commands without user interaction. This vulnerability could potentially resul...
CVE-2026-121894
Adobe Connect is affected by an SQL Injection vulnerability (CWE-89) caused by the improper neutralization of special elements used in an SQL command. A low-privileged attacker could exploit this to execute arbitrary SQL commands, potentially leading to arbitrary code execution in the context of ...
CVE-2026-121894 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2024-34222
Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...
FUXA <= 1.1.12 - Unauthenticated SQL Injection
FUXA = 1.1.12 contains a SQL injection caused by unsanitized input in /api/signin, letting attackers execute arbitrary SQL commands, exploit requires sending crafted input to the endpoint. id: CVE-2023-31719 info: name: FUXA = 1.1.12 - Unauthenticated SQL Injection author: Securin severity:...
Zabbix - SQL Injection
Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...
PT-2026-144804
Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command SQL Injection allows a low-privileged attacker to execute arbitrary SQL commands. This can lead to arbitrary code...
PT-2026-144807
Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command SQL Injection allows a low-privileged attacker to execute arbitrary SQL commands. This can lead to arbitrary code...
CVE-2026-84030
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
EUVD-2026-119730
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84030 IBM Guardium Data Protection is affected by multiple vulnerabilities
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...