WordPress Ajax Search Lite SQL injection vulnerability

WordPress Ajax Search Lite versions 4.14.6 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the ID parameter by the readfile function in the download.php file of the File Download component, potentiall...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the username/password parameters in the Login function within the adminclass.php file, potentially enabling S...

itsourcecode Online Cake Ordering System input validation error vulnerability

The 1.0 version of itsourcecode’s Online Cake Ordering System contains a security vulnerability stemming from improper handling of the ‘del’ parameter in the /transactionsave.php file, which may lead to SQL injection...

CVE-2026-91668

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Dictionary Repository. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Da...

CVE-2026-91275

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Monitoring and Diagnostics SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privileged attacker with network access via SQL to compromise JD...

CVE-2026-101469

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Product...

CVE-2026-101457

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: eDetailing. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel Apps - Life Sciences. Successfu...

CVE-2026-91668

A vulnerability exists in the Dictionary Repository component of Oracle Data Integrator within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SQL can easily exploit this flaw to compromise the product, potentially ...

CVE-2026-91275

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A high privileged attacker with network access via SQL can exploit this difficult-to-exploit vulnerability to compromise the tools. Successful exploitation ...

CVE-2026-101469

A vulnerability exists in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues ), specifically affecting version 3.6.1 . A low privileged attacker with network access via SQL can exploit this difficult-to-exploit vulnerability to compromise the pro...

CVE-2026-101457

The Siebel Apps - Life Sciences product (part of Oracle Siebel CRM ) is affected by a vulnerability in the eDetailing component across supported versions 17.0-26.9 . A low privileged attacker with network access via SQL can easily exploit this vulnerability to compromise the application. Successf...

CVE-2015-20128

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...

EUVD-2015-9432

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...

CVE-2015-20128 FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...

CVE-2015-20128

FooSun DotNetCMS 1.0 and 2.0 are affected by an SQL injection vulnerability. The flaw resides in the CityId parameter, where unauthenticated attackers can send GET requests to /user/City_ajax.aspx containing UNION SELECT payloads. Because the input is concatenated unsanitized into the sys_City qu...

sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()

A flaw was found in SQLite. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. By supplying a specially crafted database file or SQL query that performs a count operation over a large multi-row VALUES clause, an attacker can trigger excessive...

CVE-2026-113608

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113607

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the datefrom/dateto parameter by the mysqliquery function within the returnedbooksearch.php file in the Search Form component, potentially leading ...