EUVD-2026-91195

The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the database once the resulting content is published and viewed b...

CVE-2026-104123

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to SQL injection due to an unknown functionality in the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. By manipulating the Title argument, an attacker can execute arbitrary SQL commands. This...

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

EUVD-2026-91164

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104052

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2026-104053

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-104053 itsourcecode Pet Shop Management System admin_reservefilter.php sql injection

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-104053 itsourcecode Pet Shop Management System admin_reservefilter.php sql injection

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-104053

The itsourcecode Pet Shop Management System 1.0 is vulnerable to SQL injection via an unknown function in the admin_reservefilter.php file. The flaw occurs because the filter argument is improperly handled, allowing for remote exploitation. While the documents do not provide specific remediation ...

EUVD-2026-91156

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-104052 itsourcecode Pet Shop Management System admin_reject_completed.php sql injection

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2026-104052 itsourcecode Pet Shop Management System admin_reject_completed.php sql injection

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2026-104052

The Pet Shop Management System 1.0 is vulnerable to SQL injection via an unknown function within the admin_reject_completed.php file. The flaw is triggered by the manipulation of the ID argument , allowing an attacker to initiate the attack remotely . Publicly disclosed exploits for this vulnerab...

EUVD-2026-91158

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

EUVD-2026-91138

ClipBucket v5 through 5.5.3-197 contains an sql injection vulnerability that allows authenticated users with admanageraccess permission to inject SQL via the delete parameter in adminarea/adsmanager.php. Attackers can supply time-based blind payloads concatenated into AdsManager::DeleteAd queries...

CVE-2026-103766

ClipBucket v5 through 5.5.3-197 contains an sql injection vulnerability that allows authenticated users with admanageraccess permission to inject SQL via the delete parameter in adminarea/adsmanager.php. Attackers can supply time-based blind payloads concatenated into AdsManager::DeleteAd queries...

CVE-2026-97634: Improper Neutralization of Special Elements used in an SQL Command

The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-104613: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...