Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from incorrect operations with the parameter epayrollno in the file employees/delete.php, which may lead to SQL injection...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from operations on the parameters fno/fid/fname/flocallity/fac/fphone in the mysqliquery function within the file farmers/add.php. It may lead to SQL injection attacks, and attackers could exploit this...

Itsourcecode Online Cake Ordering System: Input validation error vulnerability

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

NocoBase SQL injection vulnerability

NocoBase 2.2.28 and earlier versions have a SQL injection vulnerability. This vulnerability arises from bypassing checkSQL by using the sqlCollection:setFields operation, allowing unvalidated SQL to be executed, which may lead to SQL injection. This could result in reading the pgshadow password...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file Officers/searchOff.php, specifically the parameter Search, which may lead to SQL injection attacks...

aircheng-org iWebShop: Input validation error vulnerability

The aircheng-org iWebShop version 5.0 to 5.16 contains security vulnerabilities. These vulnerabilities stem from improper handling of the Util::search function in the classes/util.php file. They may lead to SQL injection attacks, and attackers can launch attacks remotely...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability, which stems from incorrect handling of the Search parameter in the file search.php. This could lead to SQL injection attacks...

Integratec SQL injection vulnerability

Integratec has a SQL injection vulnerability. This vulnerability stems from an UNION-type SQL injection in the sInfo parameter sent via POST to the /login/apLogin.aspx/start endpoint. It may allow attackers to steal credentials and user information from the database, causing errors and...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters such as id, name, title, year, gender, fromdate, and todate by the mysqliquery function in the Registration-Edit Handler component’s doedit.php file. This may lead to S...

CVE-2026-111990

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990

The kishan0725 Hospital Management System (up to version 777fda46b77a820977a5ba616283dbfbc40bf7e1 ) is vulnerable to a SQL injection flaw. The issue resides in the Appointment Cancellation Handler component, specifically within the mysqli_query function of the admin-panel.php file. By manipulatin...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-111990 kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

EUVD-2026-103673

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqliquery of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql...

CVE-2026-112017

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...

CVE-2026-112017

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...

CVE-2026-112017 JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...

CVE-2026-112017 JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...