262016 matches found
CVE-2026-102908: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to laun...
PT-2026-103298
Name of the Vulnerable Software and Affected Versions JCTables version 1.21.1 Description An unauthenticated SQL injection exists in the front-end CRUD API controller. The component fails to perform Joomla token validation and authentication checks on any task. Table names, column names, and valu...
CVE-2026-82307: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1...
CVE-2026-62097: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...
CVE-2026-103229: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...
CVE-2026-96828: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in Category Discount Woocommerce = 5.18 versions...
CVE-2026-96822: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...
CVE-2026-96346: Improper Neutralization of Special Elements used in an SQL Command
Author SQL Injection in WP ERP = 1.17.9 versions...
CVE-2026-96345: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in Estatik = 4.3.5 versions...
CVE-2026-93621: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...
CVE-2026-102109: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitatio...
CVE-2026-102910: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument testid results in sql injection. The attack can be launch...
CVE-2026-102909: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/examproper/btnfunctions.php. The manipulation of the argument accesscode leads to sql injection. The attack can be initiated remotely...
CVE-2026-103115: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...
CVE-2026-102456: Improper Neutralization of Special Elements used in an SQL Command
EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...
CVE-2026-16596: Improper Neutralization of Special Elements used in an SQL Command
The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'datafieldslist' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2026-103232: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/tablebooking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is...
Iron Mountain enVision 260654 Authenticated SQL Injection
Iron Mountain enVision versions before 260655 contain an authenticated SQL injection vulnerability in the DocumentModule document-listing and detailed-search sorting parameter...
CVE-2026-103230: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...