263021 matches found
CVE-2026-58046: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel...
CVE-2025-69938
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-65336
The Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 software is vulnerable to SQL Injection within the /show_price_by_pdtId.php component. This vulnerability is characterized as an Improper Neutralization of Special Elements used in an SQL command. The impact is rated as CRITICAL with a CV...
CVE-2025-69937
CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the id parameter. This vulnerability allows for the insertion of malicious SQL statements into entry fields for execution, which can lead to unauthorized access to the underlying da...
CVE-2026-4978: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
ejabberd -- Multiple security vulnerabilities
ejabberd team reports: It's possible to craft PLAIN auth request and authenticate as one user, but then open session for different one. modcaps persistent cache can be poisoned by using legacy version requests.This cache was only used to determine list of nodes that should trigger notifications i...
Linux Distros Unpatched Vulnerability : CVE-2026-17543
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before...
PHP 8.3.x < 8.3.33 Multiple Vulnerabilities SQLI
The version of PHP installed on the remote host is prior to 8.3.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.33 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....
CVE-2026-48448: Improper Neutralization of Special Elements used in an SQL Command
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...
PT-2026-66457
Name of the Vulnerable Software and Affected Versions PHP versions 8.2.0 through 8.2.32 PHP versions 8.3.0 through 8.3.32 PHP versions 8.4.0 through 8.4.23 PHP versions 8.5.0 through 8.5.8 Description Improper escaping of backslashes in attacker-provided parameters allows for SQL injection, a...
CVE-2025-69938
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI
The version of PHP installed on the remote host is prior to 8.2.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.33 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....
CVE-2025-69937: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
CVE-2025-69938
The CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection within the renew.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command, specifically via the membershipType parameter. Attackers can insert malicious SQL statemen...
CVE-2025-69941
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...