16798 matches found
PT-2025-22787 · Unknown · Majestic Support
Name of the Vulnerable Software and Affected Versions: Majestic Support versions n/a through 1.1.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks against Majestic...
CVE-2025-48701
openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...
PT-2025-22775 · Unknown · Letscms Mlm
Name of the Vulnerable Software and Affected Versions: LETSCMS MLM Software Binary MLM Plan versions n/a through 3.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
CVE-2025-48701
The CVE-2025-48701 entry corresponds to openDCIM before version 23.05, with a SQL injection in the people_depts.php path caused by not using prepared statements. Affected software: openDCIM 23.04 and earlier. Root cause: lack of prepared statements in a query in people_depts.php. Impact: potentia...
PT-2025-22685 · WordPress · Pixel Wordpress Form Builderplugin & Autoresponder
Name of the Vulnerable Software and Affected Versions: Pixel WordPress Form BuilderPlugin & Autoresponder versions 1.0.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for Blind...
PT-2025-22806 · Unknown · Phpgurukul Restaurant Table Booking System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Restaurant Table Booking System using PHP and MySQL version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the searchdata parameter at the "/rtbs/check-status.php" AP...
PT-2025-22820 · Bos Ipcs · Bos Ipcs
Name of the Vulnerable Software and Affected Versions: BOS IPCs versions 21.45.8.2.2 220219 through 21.45.8.2.2 220219 Description: A SQL Injection issue in the request body processing allows remote attackers to obtain sensitive information from the database via crafted input in the request body...
PT-2025-22767 · Woocommerce · Printcart Web To Print Product Designer
Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions 2.3.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for...
CVE-2024-51101
PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php...
PT-2025-22759 · Unknown · Facturante
Name of the Vulnerable Software and Affected Versions: Facturante versions n/a through 1.11 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
SQL Injection Vulnerability in UFIDA U8+CRM at UFIDA Network Technology Co.
UFIDA U8+CRM is a management software designed specifically for the agency sales and service industry that integrates CRM, call center, and OA core applications and provides integrated applications for front-end marketing, back-end business processing, and employee management. A SQL injection...
CVE-2025-48701
openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...
PT-2025-22725 · Indigothemes · Indigothemes Wp Hrm Lite
Name of the Vulnerable Software and Affected Versions: IndigoThemes WP HRM LITE versions 1.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
CVE-2025-48735
A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...
CVE-2025-48735
CVE-2025-48735 concerns BOS IPCs where firmware before 21.45.8.2.3_230220 is vulnerable to a SQL injection in the request body processing. The affected component is the BOS IPCs firmware stack (versions from 21.45.8.2.2_220219 up to, but not including, 21.45.8.2.3_230220). The root cause is impro...
PT-2025-22728 · Unknown · Detheme Easy Guide
Name of the Vulnerable Software and Affected Versions: Detheme Easy Guide versions n/a through 1.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...
CVE-2022-43354
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...
CVE-2022-43318
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php...