Lucene search
+L

236983 matches found

CVE
CVE
added 2026/07/30 6:0 a.m.16 views

CVE-2026-15153

The CVE-2026-15153 entry concerns the WP Hotel Booking WordPress plugin (versions prior to 2.3.2). The underlying issue is that a search parameter on an administrative listing is not properly sanitised or escaped before its value is interpolated into a SQL query, enabling SQL injection by users w...

6.8CVSS5.9AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/30 3:16 a.m.8 views

CVE-2026-48448

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS0.0037EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 3:3 a.m.13 views

EUVD-2026-50951

The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via 'metakey' Custom Field via 'Save and Duplicate' Action in all versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6AI score0.00249EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/30 2:48 a.m.52 views

CVE-2026-48448 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS0.0037EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 2:48 a.m.11 views

EUVD-2026-50956

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/30 2:16 a.m.6 views

CVE-2026-15929

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 1:50 a.m.14 views

EUVD-2026-50947

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

7.1CVSS5.9AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/30 1:50 a.m.43 views

CVE-2026-15929

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

7.1CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 12:31 a.m.10 views

EUVD-2025-210534

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

6.3AI score0.00203EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/30 12:31 a.m.8 views

EUVD-2025-210540

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

6AI score0.00169EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/30 12:31 a.m.8 views

EUVD-2025-210537

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

6AI score0.0026EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/30 12:31 a.m.8 views

EUVD-2025-210532

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...

6AI score0.00169EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/30 12:31 a.m.16 views

EUVD-2025-210541

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

6AI score0.00276EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:0 a.m.9 views

MantisBT < 2.28.4 Multiple Vulnerabilities

The version of MantisBT installed on the remote host is prior to 2.28.4. It is, therefore, affected by multiple vulnerabilities: - A SQL injection vulnerability exists in core/historyapi.php. The historyorder configuration value is concatenated directly into a SQL ORDER BY clause without any...

5.8AI score
SaveExploits0References10
EUVD
EUVD
added 2026/07/30 12:0 a.m.8 views

EUVD-2025-210553

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...

6AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/30 12:0 a.m.29 views

CVE-2025-69937

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...

0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.11 views

PT-2026-66587

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, in the 'renew.php' endpoint via the membershipTy...

9.8CVSS5.6AI score0.0026EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/30 12:0 a.m.10 views

EUVD-2025-210555

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

6AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/30 12:0 a.m.31 views

CVE-2025-69947

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/30 12:0 a.m.31 views

CVE-2025-65336

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...

0.00321EPSS
SaveExploits0References1
Rows per page
Query Builder