284754 matches found
CVE-2025-45871: Improper Neutralization of Special Elements used in an SQL Command
LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...
CVE-2026-105920: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...
CVE-2026-105918: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
CVE-2026-105472: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...
CVE-2026-4889: Improper Neutralization of Special Elements used in an SQL Command
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
CVE-2026-42415: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
CVE-2026-105471: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...
CVE-2026-32557: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...
CVE-2026-105317: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
CVE-2026-105807: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...
CVE-2026-42417: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...
CVE-2026-42416: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
CVE-2026-42414: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-41555: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-105957: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...
CVE-2026-39785: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...
CVE-2026-39771: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...
CVE-2026-39764: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...