Lucene search
+L

264200 matches found

osv_cve
osv_cve
•added 2026/10/19 12:30 p.m.•15 views

CVE-2026-112141 satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqliquery of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument...

6.9CVSS5.4AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/19 12:30 p.m.•22 views

CVE-2026-112141

The satya-vinay Events-Management-System is vulnerable to SQL injection in the Registration-Edit Handler component. The flaw exists in the mysqli_query function within the doedit.php file. Attackers can manipulate the id, name, title, year, gender, fromdate, todate, or people arguments to execute...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/19 12:17 p.m.•19 views

CVE-2026-112139

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/19 11:45 a.m.•47 views

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/19 11:45 a.m.•13 views

EUVD-2026-104248

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/19 11:45 a.m.•7 views

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/19 11:45 a.m.•22 views

CVE-2026-112139

A SQL injection vulnerability exists in the Administrative Mutation Handler component of the subhajitkhan online-clinic-management-system (up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578). The flaw is triggered by manipulating the docid argument within the admindocview.php file. This vulner...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/19 11:45 a.m.•18 views

CVE-2026-112139 subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

6.9CVSS5.5AI score
SaveExploits0References8
NVD
NVD
•added 2026/10/19 10:16 a.m.•9 views

CVE-2026-108776

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/19 9:21 a.m.•39 views

CVE-2026-108776 Apache Kylin: tables/names SparkSQL injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

0.00191EPSS
SaveExploits0References1
Mend
Mend
•added 2026/10/19 9:21 a.m.•8 views

CVE-2026-108776

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

6.3CVSS5.9AI score0.00191EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/19 9:21 a.m.•11 views

EUVD-2026-104145

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

6AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/19 9:21 a.m.•24 views

CVE-2026-108776

A SQL Injection vulnerability exists in Apache Kylin affecting versions 4.0.0 through 5.0.4 . The flaw is caused by the improper neutralization of special elements used in an SQL command within the tables/names SparkSQL component. The impact is considered moderate when the Kylin service is operat...

5.9AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/19 9:17 a.m.•8 views

CVE-2026-13695

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

8.8CVSS0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/19 8:37 a.m.•39 views

CVE-2026-13695 SQL Injection in the Integratec Application

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

8.8CVSS0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/19 8:37 a.m.•5 views

CVE-2026-13695 SQL Injection in the Integratec Application

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

8.8CVSS6AI score0.00249EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/19 8:37 a.m.•10 views

EUVD-2026-104125

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

8.8CVSS6AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/19 8:37 a.m.•16 views

CVE-2026-13695

The Integratec application is vulnerable to a UNION-based SQL injection vulnerability. The flaw exists in the sInfo parameter when sent via a POST request to the /login/ap_Login.aspx/start endpoint. Successful exploitation could allow an unauthenticated attacker to steal sensitive database inform...

8.8CVSS6AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/19 8:17 a.m.•13 views

CVE-2026-112090

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

6.5CVSS0.00251EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/19 7:16 a.m.•15 views

CVE-2026-112089

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

5.8CVSS0.0021EPSS
SaveExploits0References6
Rows per page
Query Builder