287912 matches found
PT-2026-106090
FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...
PT-2026-106190
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database...
PT-2026-106040
Name of the Vulnerable Software and Affected Versions onetwothreeneth HospitalManagementSystem versions prior to 9ef91ed6007314b6473110ed699dff76d158f61d Description A remote SQL injection exists in the file php/controller.php. This occurs when the transaction idS argument is manipulated, allowin...
PT-2026-106244
Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description A remote SQL injection is possible within the Login Handler component. The issue occurs in the mysqli query function located in t...
PT-2026-106467
Name of the Vulnerable Software and Affected Versions Newsletter Subscription Form – User Subscriptions Form, Capture Email versions prior to 1.6.0 Description An unauthenticated SQL Injection exists in the plugin due to insufficient escaping of user-supplied parameters and a lack of proper...
CVE-2026-105385: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
CVE-2026-105383: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...
CVE-2026-105177: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...
CVE-2026-105176: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...
CVE-2026-105172: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...
CVE-2026-88397
The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...
EUVD-2026-92467
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...
CVE-2026-105387: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...
CVE-2026-105186: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
PT-2026-106006
GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...
CVE-2026-102428: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector...
CVE-2026-105469: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...
PT-2026-104712
A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...
CVE-2026-103066: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...
