263015 matches found
CVE-2025-69931: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69941
SourceCodester Tailor Management System version 1.0 is vulnerable to SQL Injection via the id parameter in the addmeasurement.php endpoint. This vulnerability allows for the execution of malicious SQL statements, potentially impacting the confidentiality, integrity, and availability of the databa...
CVE-2025-65336: Improper Neutralization of Special Elements used in an SQL Command
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2026-22620: Improper Neutralization of Special Elements used in an SQL Command
Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...
CVE-2025-69938: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2026-13395: Improper Neutralization of Special Elements used in an SQL Command
The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...
CVE-2025-69930: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
MantisBT < 2.28.4 Multiple Vulnerabilities
The version of MantisBT installed on the remote host is prior to 2.28.4. It is, therefore, affected by multiple vulnerabilities: - A SQL injection vulnerability exists in core/historyapi.php. The historyorder configuration value is concatenated directly into a SQL ORDER BY clause without any...
PT-2026-66411
Name of the Vulnerable Software and Affected Versions Plesk affected versions not specified Description Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection, which is a technique used to manipulate database queries. This allow...
CVE-2026-15153: Improper Neutralization of Special Elements used in an SQL Command
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
CVE-2025-69937
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
CVE-2025-69934: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
EUVD-2025-210561
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2026-54368: Improper Neutralization of Special Elements used in an SQL Command
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...
CVE-2026-58046: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel...
CVE-2025-69938
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-65336
The Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 software is vulnerable to SQL Injection within the /show_price_by_pdtId.php component. This vulnerability is characterized as an Improper Neutralization of Special Elements used in an SQL command. The impact is rated as CRITICAL with a CV...
CVE-2026-4978: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...