Lucene search
+L

8569 matches found

EUVD
EUVD
added 11 hours ago6 views

EUVD-2026-52221

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of the component Email Template Configuration. Performing a manipulation of the argument emailtemplateskey results in sq...

5.8CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 12 hours ago5 views

EUVD-2026-52165

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

9.1CVSS5.7AI score
SaveExploits0References1
Nuclei
Nuclei
added 14 hours ago101 views

NocoBase - SQL Injection

NocoBase versions prior to 2.0.39 contain a SQL injection vulnerability in the @nocobase/database package. The queryParentSQL function in eager-loading-tree.ts constructs a recursive CTE query by directly concatenating user-controlled primary key values into the SQL WHERE IN clause without...

8.8CVSS5.9AI score0.01875EPSS
SaveExploits1References2
NVD
NVD
added 3 days ago7 views

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

9.4CVSS0.00503EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago13 views

CVE-2026-46593

The CVE-2026-46593 entry describes an authenticated SQL injection in the PHP Jabbers – PHP Poll Script. The vulnerability arises from improper neutralization of user input to the pjAdminPolls.controller.php endpoint, enabling an authenticated attacker to perform SQL Injection attacks. The issue i...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago11 views

EUVD-2026-51526

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago10 views

EUVD-2025-210567

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS5.8AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago9 views

CVE-2026-63221

CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch substitutes bound values from where conditions into generated SQL while ignoring their escape flags, allowing user-controlled condition values to be interpreted as SQL. This affects only the...

9.4CVSS0.00377EPSS
SaveExploits0References3
EUVD
EUVD
added 3 days ago13 views

EUVD-2026-51428

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

3.7CVSS5.9AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 3 days ago11 views

PT-2026-66750

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago9 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago39 views

CVE-2026-15153 WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

0.00297EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago34 views

CVE-2026-48448

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) due to improper neutralization of special elements in SQL commands. The issue could allow an attacker to read files on the file system without user interaction, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:C...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago8 views

EUVD-2025-210539

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

6AI score0.00169EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 4 days ago6 views

PHP 8.4.x < 8.4.24 Multiple Vulnerabilities SQLI

The version of PHP installed on the remote host is prior to 8.4.24. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.24 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....

9.3CVSS6AI score0.00428EPSS
SaveExploits0References8
CVE
CVE
added 4 days ago11 views

CVE-2025-69931

CVE-2025-69931 affects CodeAstro Membership Management System 1.0. A SQL Injection vulnerability is exposed in the endpoint /delete_membership.php?id=1, enabling an attacker to potentially manipulate the database. The CVSS v3.1 base score is 9.8 (CRITICAL), with impact on confidentiality, integri...

9.8CVSS6AI score0.00143EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago8 views

EUVD-2025-210554

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

6AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago35 views

CVE-2026-5490 DriveLock SQL Injection Privilege Escalation Vulnerability

DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...

8.8CVSS0.00481EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago7 views

CVE-2026-8339

A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 inclusive. A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and other unauthorized commands...

8.7CVSS0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago27 views

CVE-2026-11973 WP-Lister Lite for eBay <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

4.9CVSS0.00294EPSS
SaveExploits0References7
Rows per page
Query Builder