263022 matches found
CVE-2025-69930
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69936
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...
CVE-2025-65336
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2025-69947
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...
CVE-2026-62845: Improper Neutralization of Special Elements used in an SQL Command
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2025-69933: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...
CVE-2025-69936: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...
EUVD-2025-210565
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
EUVD-2025-210557
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2026-16092: Improper Neutralization of Special Elements used in an SQL Command
The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via 'metakey' Custom Field via 'Save and Duplicate' Action in all versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2025-69935: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
CVE-2025-69947
SourceCodester Tailor Management System version 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability exists in the customeredit.php endpoint via the id variable, which allows malicious SQL statements to be inserted and exe...
PHP 8.5.x < 8.5.9 Multiple Vulnerabilities SQLI
The version of PHP installed on the remote host is prior to 8.5.9. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.5.9 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2...
PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI
The version of PHP installed on the remote host is prior to 8.2.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.33 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....
CVE-2025-69949
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...
CVE-2025-67403
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...
CVE-2025-69943
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...
CVE-2025-69944
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...