PT-2026-95951

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A remote SQL injection exists in the /login.php endpoint. This issue occurs when the Password variable is manipulated, allowing an attacker to interfere with the database...

PT-2026-95983

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description Remote SQL injection is possible through the manipulation of the item, price, image, or type arguments within the 'admin/add...

CVE-2026-93963: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2026-95943

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs in th...

PT-2026-95994

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An unauthenticated SQL Injection exists in the OrdaSoft Joomla Gallery extension. The functions showSearchResult and showSearchResultAjax process the textsearch or searchText request...

CVE-2026-93997: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/editsymptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

PT-2026-95954

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A SQL injection flaw exists in the /Admin/edit symptom.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

CVE-2026-93979: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-93978: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

PT-2026-95952

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries, by manipulating the Password variable within the...

CVE-2026-94042: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

PT-2026-95997

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant Management System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description Remote SQL injection is possible through the manipulation of the table/members/price argument. This issue occurs within the mysqli...

CVE-2026-94015: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

CVE-2026-93972: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

Exploit for CVE-2026-77635

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-79752

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-93983

OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...

CVE-2026-93983 OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filter

OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...

CVE-2026-93983 OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filter

OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...

CVE-2026-93983

OpenPanel (through commit bad75bdd ) contains a SQL injection vulnerability in its ClickHouse query layer. The root cause is a failure to escape property keys used in ClickHouse SQL queries, allowing an authenticated user to inject boolean SQL terms via crafted filter names. This enables attacker...