CVE-2026-113608

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113607

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the datefrom/dateto parameter by the mysqliquery function within the returnedbooksearch.php file in the Search Form component, potentially leading ...

itsourcecode sales-and-inventory-system input validation error vulnerability

The itsourcecode sales-and-inventory-system contains a security vulnerability stemming from improper handling of the ID parameter in the /pages/custdel.php file, which may lead to SQL injection...

Dhikshitha Insurance-Management-System input validation error vulnerability

The Dhikshitha Insurance Management System has a security vulnerability stemming from improper handling of the Policyno/Name parameters in the mysqliquery function within the file /Agent/ManagePolicy/EditPolicyHolder.php; this may lead to SQL injection...

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder has a SQL injection vulnerability, which arises due to improper handling of special elements used in SQL commands, potentially leading to SQL injections...

oretnom23 php-travel-agency-system input validation error vulnerability

The oretnom23 php-travel-agency-system contains a security vulnerability stemming from improper handling of parameters action/fullname/visano/hiden/title/description/pageid/user in the admin/update.php file. This may lead to remote SQL injection attacks...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php has a security vulnerability. This vulnerability stems from improper handling of the name, username/password/type/id parameters in the saveuser function within the adminclass.php file of the User Account Management component. It may lead to SQL injection,...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the rollnumber parameter by the mysqliquery function in the file individualreportsearch.php, potentially leading to SQL injection...

itsourcecode Online Cake Ordering System input validation error vulnerability

The 1.0 version of itsourcecode’s Online Cake Ordering System contains a security vulnerability stemming from improper handling of the ID parameter in the /deletecustomer.php file. This flaw may lead to SQL injection attacks that can be carried out remotely...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of the Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the firstname/middlename/lastname/address/branch/type parameters in the file editmember.php, potentially leading to SQL injection...

Projectworlds Advanced Library Management System: Input validation error vulnerability

The Projectworlds Advanced Library Management System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the adminid parameter in the mysqliquery function within the file profile.php, which may lead to remote SQL injection attacks...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the dateto/datefrom parameters in the mysqliquery function within the file reportsearch.php, potentially leading to SQL injection...

itsourcecode sales-and-inventory-system input validation error vulnerability

The itsourcecode sales-and-inventory-system has a security vulnerability stemming from improper handling of the ID parameter in the /pages/custedit.php file, which may lead to SQL injection...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

EUVD-2026-105086

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608

The Configurable Reports block for Moodle (moodle-block_configurablereports) versions prior to 5.3.1 is vulnerable to an SQL injection in the report_sql::prepare_sql() function. The flaw is triggered via the filter_var request parameter within viewreport.php. Low-privileged users authorized to vi...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...