Lucene search
+L

218633 matches found

CVE
CVE
added 6 days ago17 views

CVE-2026-13395

The CVE-2026-13395 entry concerns the WordPress plugin “Online Scheduling and Appointment Booking System” prior to version 27.8. The underlying issue is that a parameter from unauthenticated front-end booking requests is not properly sanitized or cast before being used in a SQL query, enabling un...

8.6CVSS5.9AI score0.00339EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago10 views

EUVD-2026-50990

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

6.8CVSS5.9AI score0.00297EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago12 views

CVE-2026-15153

The CVE-2026-15153 entry concerns the WP Hotel Booking WordPress plugin (versions prior to 2.3.2). The underlying issue is that a search parameter on an administrative listing is not properly sanitised or escaped before its value is interpolated into a SQL query, enabling SQL injection by users w...

6.8CVSS5.9AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago7 views

CVE-2026-48448

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS0.0037EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago13 views

EUVD-2026-50951

The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via 'metakey' Custom Field via 'Save and Duplicate' Action in all versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6AI score0.00249EPSS
SaveExploits0References4
EUVD
EUVD
added 6 days ago11 views

EUVD-2026-50956

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago49 views

CVE-2026-48448 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS0.0037EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago6 views

CVE-2026-15929

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago14 views

EUVD-2026-50947

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

7.1CVSS5.9AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago42 views

CVE-2026-15929

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago10 views

EUVD-2025-210534

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

6.3AI score0.00203EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago8 views

EUVD-2025-210540

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

6AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago8 views

EUVD-2025-210532

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...

6AI score0.00169EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago8 views

EUVD-2025-210537

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

6AI score0.0026EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago16 views

EUVD-2025-210541

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

6AI score0.00276EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago30 views

CVE-2025-65336

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...

0.00321EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago28 views

CVE-2025-69937

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...

0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago30 views

CVE-2025-69934

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

0.0026EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago18 views

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is affected by a SQL Injection in addmeasurement.php?id=1. the vulnerability arises from unsafe SQL handling in that endpoint, with CVSS v3.1 base metrics indicating a CRITICAL impact (C:High, I:High, A:High) and NETWORK attack vector. No remediation or...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago8 views

EUVD-2025-210553

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...

6AI score0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder