260711 matches found
CVE-2026-4889: Improper Neutralization of Special Elements used in an SQL Command
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Woffice = 5.4.35 versions...
CVE-2026-32580: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...
CVE-2026-32557: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...
CVE-2026-105472: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...
CVE-2026-105471: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...
CVE-2026-105807: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...
CVE-2026-105776: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
CVE-2026-39746: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...
CVE-2026-32581: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...
CVE-2026-105317: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...
CVE-2026-25434: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...
CVE-2026-42415: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
CVE-2026-39795: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...
CVE-2026-39771: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...
CVE-2026-42416: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
CVE-2026-41555: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-39764: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...