CVE-2026-63106

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...

CVE-2026-63106 ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...

CVE-2026-63106

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...

EUVD-2026-55629

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...

CVE-2026-63106: Improper Neutralization of Special Elements used in an SQL Command

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...

PT-2026-69845

Name of the Vulnerable Software and Affected Versions ReadyEcommerce versions prior to 4.5.2 Description An unauthenticated SQL injection exists in the product listing API. The issue occurs because the rating parameter in the 'products' endpoint is concatenated directly into a MySQL HAVING clause...

EUVD-2007-2890

Malware in sbrugna...

EUVD-2025-26389

Malicious code in bioql PyPI...

CVE-2025-9811

A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the argument rating results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be...

CVE-2025-9811

A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the argument rating results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be...

CVE-2025-9811 Campcodes Farm Management System reviewInput.php sql injection

A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the argument rating results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be...

CampCodes Farm Management System 安全漏洞

CampCodes Farm Management System is a farm management system from CampCodes Philippines. A security vulnerability exists in Campcodes Farm Management System version 1.0, which originates from a SQL injection due to a mishandling of the parameter rating in the file /reviewInput.php...

Ambit Technologies Itech Movie Portal Script SQL注入漏洞

Ambit Technologies Itech Movie Portal Script is a movie portal script from Ambit Technologies, Inc. Ambit Technologies Itech Movie Portal Script 7.36 suffers from a SQL injection vulnerability that stems from some unknown handling of film-rating.php, where manipulation of the parameter v can lead...

CVE-2009-1661

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2009-1661: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2007-2898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2006-6269

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...

PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printEOF; Exploit for PHP-Fusion 6.00.3 Released Coded by krasza...

CVE-2005-1948

CVE-2005-1948 affects Invision Gallery prior to 1.3.1. The product is vulnerable to multiple SQL injection flaws via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo, due to improper sanitization of user-supplied data. Remote attackers could ex...

CVE-2005-1948: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via 1 the comment parameter in an editcomment action or 2 the rating parameter when voting on a photo...