260874 matches found
CVE-2026-42416: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
PT-2026-106476
Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...
PT-2026-106475
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
PT-2026-106474
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
PT-2026-106473
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
PT-2026-106461
Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...
PT-2026-106363
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...
PT-2026-106407
Name of the Vulnerable Software and Affected Versions Mooberry Book Manager version 4.16.2 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the application's database queries. Recommendations At the moment, there is no information about...
PT-2026-106406
Name of the Vulnerable Software and Affected Versions WooCommerce Lottery versions prior to 2.3.0 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...
PT-2026-106395
Name of the Vulnerable Software and Affected Versions WooCommerce Appointments versions prior to 5.3.3 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to i...
CVE-2026-32581: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...
CVE-2026-105807: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...
CVE-2026-4889: Improper Neutralization of Special Elements used in an SQL Command
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
PT-2026-106335
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin transaction.php. This manipulation of the argument Username causes sql...
CVE-2026-105776: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
CVE-2026-105957: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...
CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Woffice = 5.4.35 versions...
CVE-2026-105472: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...