CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2026-80381 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

CVE-2026-81932

IBM Guardium Data Protection versions 12.0 , 12.1 , and 12.2 are vulnerable to an SQL injection (CWE-89) within the Sniffer component . A remote unauthenticated attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. To remediate ...

CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84209

IBM Guardium Data Protection versions 12.2.2 and 12.1 are susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can execute arbitrary SQL commands due to the improper neutralization of special elements used in an SQL command. The vulnerability has a HIGH base severity score of...

CVE-2026-16830

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager के आर्टिकल मूल्य निर्धारण मॉड्यूल में Time-Based Blind SQL Injection अवलोकन फ़ील्ड| विवरण ---|--- CVE ID| CVE-2026-24416 गंभीरता| HIGH सलाह| सलाह देखें खोजकर्ता| Lukasz Rybak प्रभावित उत्पाद devcode-it/openstamanager संस्करण: = 2.9.8 CWE वर्गीकरण CWE-89: SQL कमांड म...

EUVD-2026-95281

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-16830

An SQL injection vulnerability (CWE-89 ) exists in IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3). A remote authenticated attacker could exploit this flaw to modify data and trigger a denial of service . To remediate, IBM ...

CVE-2026-16830 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - URL पथ के माध्यम से बिना प्रमाणीकरण के SQL इंजेक्शन विवरण WordPress के लिए Ally – Web Accessibility & Usability प्लगइन, संस्करण 4.0.3 तक 4.0.3 सहित के सभी संस्करणों में URL पथ के माध्यम से SQL इंजेक्शन के प्रति संवेदनशील है। इसका कारण...

CVE-2026-78070

plgcontentdpcalendar में ORDER BY शॉर्टकोड के माध्यम से SQL इंजेक्शन DPCalendar Free ≤ 10.11.2 — लेखक-स्तर का उपयोगकर्ता टाइम-आधारित ब्लाइंड इंजेक्शन के माध्यम से पूरा डेटाबेस निकालता है सारांश plgcontentdpcalendar कंटेंट प्लगइन Joomla आर्टिकल बॉडी में एम्बेडेड events order="..."/events शॉर्टकोड ...

CVE-2026-24419

CVE-2026-24419: حقن SQL في وحدة Prima Nota في OpenSTAManager نظرة عامة الحقل| التفاصيل ---|--- معرف CVE| CVE-2026-24419 الخطورة| عالية النشرة الأمنية| عرض النشرة اكتُشف بواسطة| Lukasz Rybak المنتجات المتأثرة devcode-it/openstamanager الإصدارات: = 2.9.8 تصنيف CWE CWE-89: عدم التعامل السليم مع...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - OpenEMR कमज़ोरी CWE-89 SQL कमांड 'SQL इंजेक्शन' में प्रयुक्त विशेष तत्वों का अनुचित निष्प्रभावीकरण यह उत्पाद किसी अपस्ट्रीम घटक से बाह्य-प्रभावित इनपुट का उपयोग करके SQL कमांड का पूरा या आंशिक निर्माण करता है, लेकिन जब इसे डाउनस्ट्रीम घटक को भेजा जाता है तो यह उन विशेष तत्वों को...

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Scripts em Python para exploração de CVE-2024-51482 SQLi no ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Descrição Este script automatiza a extração de bases de dados, tabelas, colunas e credenciais aproveitando CVE-2024-51482, uma vulnerabilidade de...

CVE-2025-10351-POC

CVE-2025-10351 POC - Exploração de Injeção SQL 💉 POC para CVE-2025-10351: Uma vulnerabilidade de Injeção SQL não autenticada que afeta um endpoint específico no Melis Platform Framework. 🔗 Referências 📄 CVE-2025-10351 no MITRE 📄 Aviso do Melis Platform no INCIBE Instituto Nacional de Ciberseguran...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-82896 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability...

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...