CVE-2026-85540: Improper Neutralization of Special Elements used in an SQL Command

DreamMaker developed by Interinfo has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2022-20321

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "admin/viewreport.php" endpoint. This allows for potential unauthorized access and manipulation of database content. No information is...

PT-2022-13598

Name of the Vulnerable Software and Affected Versions Podcast Importer SecondLine WordPress plugin versions prior to 1.3.8 Description The issue is related to the improper sanitization and escaping of some imported data, which could allow SQL injection attacks to be performed by importing a...