282339 matches found
CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
CVE-2026-104389
The Sirv WordPress plugin versions up to and including 8.2.5 are vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation allows an attacker to execute arbitrary SQL commands. No specific exploit...
WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...
CVE-2025-55885
CVE-2025-55885 Descrizione Vulnerabilità di SQL Injection in Alpes Recherche et Developpement ARD GEC en Ligne prima della v.2025-04-23 che consente a un attaccante remoto di aumentare i privilegi tramite i parametri GET in index.php Vettori d'attacco SQL Injection tramite il parametro GET non...
CVE-2026-104408 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...
CVE-2026-104408 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...
CVE-2026-104408
The Groundhogg WordPress plugin, affecting versions up to and including 4.8.3 , is susceptible to a Blind SQL Injection vulnerability. The root cause is the Improper Neutralization of Special Elements used in an SQL command. This flaw allows an attacker with high privileges to perform SQL injecti...
EUVD-2026-92314
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...
WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...
CVE-2025-64459-Poc
CVE-2025-64459: PoC di SQL Injection nell'ORM di Django Vulnerabilità: SQL Injection tramite spacchettamento degli argomenti keyword di QuerySet e Q. CVE ID: CVE-2025-64459 Scoperto da: Me Cyberstan Data di divulgazione: 5 Novembre 2025 🚨 Riepilogo Esecutivo Questo repository contiene una Prova d...
CVE-2026-105254
A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unspecified function of the /admin/schoolyear.php file, where manipulation of the sy argument allows for remote exploitation. While an exploit is reported as publicly available, sp...
CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
EUVD-2026-92297
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2024-46636-SQLi-MODAPS
CVE-2024-46636 ist eine SQL-Injection-Schwachstelle, die im MODAPS-System der NASA EOSDIS identifiziert wurde, verursacht durch eine unsachgemäße Eingabevalidierung im Parameter category. Diese Schwachstelle ermöglicht es Angreifern, auf sensible Daten zuzugreifen und beliebige SQL-Abfragen durch...
analise-vulnerabilidades-zabbix-notebooklm
🛡️ Analisi delle Vulnerabilità SQLi in Zabbix con NotebookLM Quaderno Tematico sviluppato come consegna della Sfida di Progetto della DIO Utilizzando NotebookLM come strumento di IA attiva per la cura, la sintesi e l'organizzazione della conoscenza in Cybersecurity 📋 Indice Contesto e Obiettivi...
CVE-2026-105247
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...
CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection
A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...
CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection
A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...