PT-2026-106467

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

PT-2026-106712

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql error of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The atta...

PT-2026-106291

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2025-45871

LogicalDOC Enterprise, version 9.1.1 and below , is vulnerable to a blind SQL injection within the WorkflowsDataServlet component. This flaw allows an authenticated user to manipulate SQL queries by providing a crafted workflow template name . The impact involves unauthorized data access or manip...

PT-2026-106820

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

RockyLinux 8 : mariadb-connector-c (RLSA-2026:75674)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75674 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted...

PT-2026-107193

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

PT-2026-107194

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

PT-2026-107209

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary...

PT-2026-107169

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description When the built-in SSH server is enabled via the START SSH SERVER variable, the system performs a lookup of the presented public key using an SQL LIKE comparison of its encoded content. Because...

PT-2026-106786

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view product.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

PT-2026-106420

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

PT-2026-106395

Unauthenticated SQL Injection in WooCommerce Appointments = 5.3.2 versions...

PT-2026-106474

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

PT-2026-107144

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

PT-2026-106406

Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...

PT-2026-106473

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

PT-2026-106453

Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...

PT-2026-106758

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search class.php. Such manipulation of the argument school year leads to sql injection. The attack may be launched remotely. The...