Lucene search
+L

288085 matches found

Patchstack
Patchstack
•added 2026/10/13 2:57 p.m.•22 views

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.8.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Taoufik El Adel in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.8.0...

9.8CVSS5.8AI score0.00445EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/10/13 2:57 p.m.•32 views

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.8.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by andrea bocchetti in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.8.0...

7.5CVSS5.8AI score0.00379EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2026/10/13 2:45 p.m.•21 views

CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

6.9CVSS6.8AI score0.00318EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/13 2:45 p.m.•18 views

EUVD-2026-98776

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 2:45 p.m.•24 views

CVE-2026-109523

A SQL injection vulnerability exists in the AJAX Endpoint component of the girishsaraf Online-Appointment-Booking-System (affected up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in the functionality of the Admin/getclinic.php file, where manipulating the city/cid argu...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/13 2:45 p.m.•13 views

CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 2:45 p.m.•46 views

CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

7.5CVSS0.00318EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/13 2:30 p.m.•27 views

CVE-2026-109522 girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...

6.9CVSS6.8AI score0.00263EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/13 2:30 p.m.•14 views

EUVD-2026-98768

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 2:30 p.m.•24 views

CVE-2026-109522

The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the Admin CRUD Endpoint component. Specifically, an unknown function in the Admin/deleteclinic.php file is susceptible to exploitation via the manipulation of the cid/did arguments. This flaw allows fo...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 2:30 p.m.•40 views

CVE-2026-109522 girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 2:15 p.m.•41 views

CVE-2026-109521 girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

7.5CVSS0.00328EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 2:15 p.m.•21 views

CVE-2026-109521

The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to SQL injection due to insufficient sanitization of the dateselected argument within an unknown function in the changebookingstatus.php file. This vulnerability can be exploit...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/13 2:15 p.m.•32 views

CVE-2026-109521 girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

6.9CVSS5.5AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/10/13 2:15 p.m.•12 views

CVE-2026-109521 girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 2:15 p.m.•11 views

EUVD-2026-98746

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References6
Microsoft KB
Microsoft KB
•added 2026/10/13 2:00 p.m.•52 views

KB5126967 - Description of the security update for SQL Server 2025 CU9: October 13, 2026

KB5126967 - Description of the security update for SQL Server 2025 CU9: October 13, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: October 13, 2026 Version: 17.0.5015.4 Summary Known issues in this update Improvements and fixes include...

8.8CVSS7.3AI score0.01619EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2026/10/13 2:00 p.m.•35 views

KB5126934 - Description of the security update for SQL Server 2022 CU27: October 13, 2026

KB5126934 - Description of the security update for SQL Server 2022 CU27: October 13, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Release date: October 13, 2026 Version: 16.0.4305.5 Summary Known issues in this update Improvements and fixes include...

8.8CVSS7.2AI score0.01619EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2026/10/13 2:00 p.m.•74 views

KB5128493 - Description of the security update for SQL Server 2022 GDR: October 13, 2026

KB5128493 - Description of the security update for SQL Server 2022 GDR: October 13, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Release date: October 13, 2026 Version: 16.0.1210.3 Summary Known issues in this update Improvements and fixes included...

8.8CVSS7.2AI score0.01619EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•10 views

SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

8CVSS7.8AI score0.00591EPSS
SaveExploits0
Rows per page
Query Builder