EUVD-2026-93227

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-4889 SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

wp2shell-detect

wp2shell-detect Blackbox, неинтрузивный детектор для wp2shell — цепочка RCE до аутентификации в ядре WordPress, обнародованная 2026-07-17: CVE-2026-63030 — путаница маршрутов в конечной точке пакетного REST /wp-json/batch/v1: подзапрос, путь которого не проходит wpparseurl, попадает в массив...

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105776

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-11349

Modern Events Calendar Lite = 7.33.0 — Injection SQL non authentifiée via meclistloadmore attsinclude / attsexclude Résumé Détail| Valeur ---|--- Extension| Modern Events Calendar Lite Slug| modern-events-calendar-lite Auteur| Webnus Versions affectées| = 7.33.0 la version Lite actuellement...

CVE-2026-5076

CVE-2026-5076 - ثغرة إعادة تعيين كلمة المرور في ARMember معلومات الثغرة العنصر| التفاصيل ---|--- CVE ID| CVE-2026-5076 البرنامج المساعد| ARMember – إضافة العضوية وتقييد المحتوى الإصدار المتأثر| Premium = 7.3.1 الإصدار المُصحَّح| 7.3.2 درجة CVSS| 9.8 حرجة CWE| CWE-640: استرداد كلمة مرور ضعيف النوع...

wp2shell

wp2shell-check Vérificateur non-intrusif pour CVE-2026-63030 / CVE-2026-60137 « wp2shell », une chaîne RCE sans authentification dans le cœur de WordPress confusion de route batch de l'API REST → injection SQL → RCE. Affecté : WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 beta chaîne RCE complète ;...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 - Exploit d'injection SQL non authentifiée CVE-2025-59213 Ce script exploite la vulnérabilité CVE-2025-59213, qui permet à un attaquant non authentifié ayant un accès réseau à un point de gestion d'exécuter des requêtes SQL arbitraires sur la...

RLSA-2026:75673 Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

mariadb-connector-c security update

An update is available for mariadb-connector-c. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The MariaDB Native Client library C driver is used to connect...

RLSA-2026:75674 Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

mariadb-connector-c security update

An update is available for mariadb-connector-c. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The MariaDB Native Client library C driver is used to connect...

CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-105776

A SQL injection vulnerability exists in the bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL web application. The flaw is located in an unknown functionality of the /admin_transaction.php file, where manipulation of the Username argument allows for remote code execution via S...