16798 matches found
WordPress plugin WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WooCommerce Ultimate Gift...
CVE-2025-10108
A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...
CVE-2025-58788
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: from n/a through = 3.0.12...
CVE-2025-9763 Campcodes Online Learning Management System student_signup.php sql injection
A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /studentsignup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be...
Security Bulletin: IBM Guardium Data Protection is affected by an SQL Injection via username vulnerability (CVE-2024-55906).
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2024-55906 DESCRIPTION: IBM Security Guardium is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...
CVE-2025-49898
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xolluteon Dropshix allows DOM-Based XSS.This issue affects Dropshix: from n/a through 4.0.14...
CVE-2025-9051 projectworlds Travel Management System updatecategory.php sql injection
A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /updatecategory.php. The manipulation of the argument t1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...
PT-2025-33484 · Projectworlds · Travel Management System
Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability exists in projectworlds Travel Management System 1.0. The issue affects an unknown part of the file /updatepackage.php. Manipulation of the argument s1 leads to S...
Online Admission System SQL Injection Vulnerability
Online Admission System is an online admission system. The Online Admission System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /adminac.php. An attacker can exploit this vulnerability to...
CVE-2025-54396
Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this...
CVE-2025-6986
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...
CVE-2025-50466
OpenMetadata (OpenMetadata service)
CVE-2025-50467
OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query...
CVE-2025-50467
OpenMetadata
CVE-2023-41527
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php...
CVE-2023-41525
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...
CVE-2023-41532
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...
CVE-2023-41523
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php...
PT-2025-32288 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createClassArms.php file. These flaws are present through the classId and...
