Lucene search
+L

8572 matches found

ATTACKERKB
ATTACKERKB
added 5 hours ago3 views

CVE-2026-39931

OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL privileges to execute arbitrary DDL and DML statements against the application database by uploading a crafted SQL file at the...

8.6CVSS6AI score
SaveExploits0References3
EUVD
EUVD
added 14 hours ago6 views

EUVD-2026-52221

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of the component Email Template Configuration. Performing a manipulation of the argument emailtemplateskey results in sq...

5.8CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 15 hours ago5 views

EUVD-2026-52165

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

9.1CVSS5.7AI score
SaveExploits0References1
Nuclei
Nuclei
added 17 hours ago101 views

NocoBase - SQL Injection

NocoBase versions prior to 2.0.39 contain a SQL injection vulnerability in the @nocobase/database package. The queryParentSQL function in eager-loading-tree.ts constructs a recursive CTE query by directly concatenating user-controlled primary key values into the SQL WHERE IN clause without...

8.8CVSS5.9AI score0.01875EPSS
SaveExploits1References2
NVD
NVD
added 2 days ago9 views

CVE-2026-13596

The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

9.1CVSS0.00177EPSS
SaveExploits0References1
NVD
NVD
added 3 days ago8 views

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

9.4CVSS0.00503EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago13 views

CVE-2026-46593

The CVE-2026-46593 entry describes an authenticated SQL injection in the PHP Jabbers – PHP Poll Script. The vulnerability arises from improper neutralization of user input to the pjAdminPolls.controller.php endpoint, enabling an authenticated attacker to perform SQL Injection attacks. The issue i...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago11 views

EUVD-2026-51526

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago10 views

EUVD-2025-210567

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS5.8AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago9 views

CVE-2026-63221

CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch substitutes bound values from where conditions into generated SQL while ignoring their escape flags, allowing user-controlled condition values to be interpreted as SQL. This affects only the...

9.4CVSS0.00377EPSS
SaveExploits0References3
EUVD
EUVD
added 3 days ago13 views

EUVD-2026-51428

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

3.7CVSS5.9AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 3 days ago12 views

PT-2026-66750

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago9 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago39 views

CVE-2026-15153 WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

0.00297EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago35 views

CVE-2026-48448

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) due to improper neutralization of special elements in SQL commands. The issue could allow an attacker to read files on the file system without user interaction, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:C...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago8 views

EUVD-2025-210539

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

6AI score0.00169EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 4 days ago6 views

PHP 8.4.x < 8.4.24 Multiple Vulnerabilities SQLI

The version of PHP installed on the remote host is prior to 8.4.24. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.24 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....

9.3CVSS6AI score0.00428EPSS
SaveExploits0References8
CVE
CVE
added 4 days ago11 views

CVE-2025-69931

CVE-2025-69931 affects CodeAstro Membership Management System 1.0. A SQL Injection vulnerability is exposed in the endpoint /delete_membership.php?id=1, enabling an attacker to potentially manipulate the database. The CVSS v3.1 base score is 9.8 (CRITICAL), with impact on confidentiality, integri...

9.8CVSS6AI score0.00143EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago8 views

EUVD-2025-210554

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

6AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 4 days ago5 views

PT-2026-66588

Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, via the 'addmeasurement.php' endpoint using the...

9.8CVSS5.6AI score0.0026EPSS
SaveExploits0References3
Rows per page
Query Builder