CVE-2026-112088: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqliquery of the file farmers/add.php. Executing a manipulation of the argument fno/fid/fname/flocallity/fac/fphone can...

PT-2026-117291

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

PT-2026-117258

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqli real escape string of the file payment/pay.php. The manipulation of the argument f no/farmer results in sql...

PT-2026-117371

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...

Automotive Shop Management System 1.0 SQL Injection

Automotive Shop Management System version 1.0 suffers from a remote SQL injection vulnerability. Titles: Automotive Shop Management System 1.0 Multiple SQLi Author: nu11secur1ty Date: 10/19/26 Vendor: https://github.com/oretnom23 Software:...

PT-2026-117452

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAX lookup handler.php, admin/AJAX check id.php, admin/AJAX vocabolary control.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to...

CVE-2026-107083

The SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection (CWE-89) due to improper neutralization of special elements in unquoted numeric contexts. The vulnerability exists in two admin modules: admin/modules/serial_control/subscription.php (via ite...

VulnCheck KEV: CVE-2026-94177

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.2...

EUVD-2026-104519

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

PT-2026-117450

A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...

EUVD-2026-104452

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

CVE-2026-107081: Undefined Security Weakness

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a remote attacker to execute arbitrary SQL queries...

CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

CVE-2026-112150: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

CVE-2026-112032

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

CVE-2026-112032

A SQL injection vulnerability exists in aircheng-org iWebShop-5 versions up to 5.16 . The flaw is located in the Util::search function within the classes/util.php file. An attacker can initiate this attack remotely to manipulate database queries. While the project was notified early via an issue ...