CVE-2026-105386 onetwothreeneth HospitalManagementSystem print.php get sql injection

A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...

CVE-2026-105386 onetwothreeneth HospitalManagementSystem print.php get sql injection

A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...

EUVD-2026-92620

A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...

CVE-2026-105386

The onetwothreeneth HospitalManagementSystem is vulnerable to a remote SQL injection vulnerability in the get function of the print.php file. An attacker can manipulate the transaction_id argument to execute unauthorized SQL commands. The product utilizes a rolling release, so specific affected o...

CVE-2026-105386 onetwothreeneth HospitalManagementSystem print.php get sql injection

A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...

CVE-2021-43408

CVE-2021-43408: إضافة ووردبريس Duplicate Post الإصدار 1.1.9 - حقن SQL أولا: نظرة عامة 1. ما هو ووردبريس WordPress هو برنامج CMS نظام إدارة المحتوى مفتوح المصدر، وهو نظام لإدارة المحتوى. بدلاً من استخدام لغة HTML البرمجية، كُتب ووردبريس بلغة البرمجة PHP باستخدام قاعدة بيانات MySQL. أسس ووردبريس...

org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update

A security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-105385

A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...

CVE-2026-105384

A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patientinfo.php. Performing a manipulation of the argument patientid results in sql injection. The attack is possible to be carried out remotely...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Exploitation d'injection SQL dans Code‑Projects Hotel & Tourism Reservation 1.0 -orange -red Exploit d'injection SQL aveugle basée sur le temps, multi‑threadé et complet pour CVE‑2026‑14762. Cible le point de terminaison /admin/rooms.php de l'application Code‑Projects Hotel &...

CVE-2024-34472

CVE-2024-34472 الوصف: يمكن لمستخدم مصادَق استغلال ثغرة حقن SQL أعمى Blind SQL injection موجودة في ملف mliRealtimeEmails.php. إن معامل ordemGrid في طلب POST إلى /mailinspector/mliRealtimeEmails.php لا يعقّم الإدخال بشكل صحيح، مما يسمح لمهاجم مصادَق بتنفيذ أوامر SQL عشوائية، وقد يؤدي ذلك إلى كشف...

EUVD-2026-92591

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

CVE-2026-103352 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

CVE-2026-103352 WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

CVE-2026-103352

The WP BASE Booking WordPress plugin (versions 6.4.0 and below ) is vulnerable to a Blind SQL Injection flaw. The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to potentially execute malicious SQL queries. No specific e...

CVE-2026-9082-Drupal-PoC

CVE-2026-9082 - إثبات المفهوم PoC لحقن SQL في Drupal Core عبر PostgreSQL نظرة عامة يوفر هذا المستودع إثبات المفهوم الأخلاقي PoC لـ CVE-2026-9082 ، وهي ثغرة حقن SQL عالية الخطورة في Drupal Core تؤثر على جميع المواقع التي تستخدم PostgreSQL وتشغل Drupal من الإصدار 8.0 حتى 11.3.9. تقع الثغرة في معالج...

WordPresShell

WordPresShell إثبات مفهوم لثغرة RCE قبل المصادقة لـ CVE-2026-63030 + CVE-2026-60137 جوهر ووردبريس. ارتباك مسار REST /batch/v1 → SQLi عبر WPQuery authornotin → إنشاء مشرف غير مصادق → شيل ويب. ملف واحد، فقط مكتبة بايثون القياسية. الثغرة: آدم كيوز Searchlight Cyber. المتأثر: 6.9.0–6.9.4, 7.0.0–7.0.1...

CVE-2016-2386

CVE-2016-2386 حقن SQL في مكوّن UDDI في SAP NetWeaver AS JAVA POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type:...

CVE-2026-63030

CVE-2026-63030 سلسلة استغلال كاملة PoC لـ ارتباك توجيه الدُفعات batch routing confusion + حقن SQL في REST API لووردبريس، تؤدي إلى إنشاء مسؤول غير مصرح به → تنفيذ تعليمات برمجية عن بُعد RCE. للاستخدام فقط في اختبار الأمان المصرح به، وإعادة إنتاج الثغرات والبحث. يُمنع الاستخدام ضد أهداف غير مصرح به...