PT-2026-91766

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login Model.php. This manipulation of the argument password/email/currentpassword/dbcurrentpwd/newpassword causes cleartext...

CVE-2026-15663: Improper Neutralization of Special Elements used in an SQL Command

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to generic SQL Injection via Import File 'settings' Key in all versions up to, and including, 3.14.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

CVE-2026-3292 jizhiCMS Batch Model.php findAll sql injection

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

CVE-2026-3292: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

CVE-2026-1884: Server-Side Request Forgery (SSRF)

A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file module/webhook/model.php of the component Webhook Module. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been made...

CVE-2025-13789: Server-Side Request Forgery (SSRF)

A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the argument Base results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used...

EUVD-2009-1876

Malware in sbrugna...

CVE-2009-1880

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

PT-2024-38183 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view model.php. The manipulation of the id argument leads to SQL injectio...

CVE-2024-24216

Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...

CVE-2024-24216: Improper Neutralization of Special Elements used in a Command

Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...

PT-2023-18821

Name of the Vulnerable Software and Affected Versions Kalkun version 0.8.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It occurs via the username input in the file User model.php. Recommendations For Kalkun version 0.8.0, update the User model.php file to properl...

CVE-2015-10050 brandonfire miRNA_Database_by_PHP_MySql model.php count_rna sql injection

A vulnerability was found in brandonfire miRNADatabasebyPHPMySql. It has been declared as critical. This vulnerability affects the function construct/selectsinglerna/countrna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as...

CVE-2015-10050: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in brandonfire miRNADatabasebyPHPMySql. It has been declared as critical. This vulnerability affects the function construct/selectsinglerna/countrna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as...

CVE-2022-37112

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

Sql injection

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

CVE-2022-37112

CVE-2022-37112 affects BlueCMS 1.6 and is due to an SQL injection in line 55 of admin/model.php. The CVSS metrics in the initial entry indicate a critical impact on confidentiality, integrity, and availability, with network access, low complexity, no user interaction required, and no privileges r...

CVE-2022-37112

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

CVE-2022-37112: Improper Neutralization of Special Elements used in an SQL Command

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

PT-2022-23820 · Bluecms · Bluecms

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: The issue is related to SQL injection, specifically located in line 55 of the admin/model.php file. Recommendations: For BlueCMS version 1.6, consider restricting access to the admin/model.php file until a pat...