CVE-2025-69943

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection within the get_doctor.php file. The vulnerability is triggered via the doctor and specilizationid parameters. This flaw allows for the improper neutralization of special elements used in an SQL command, potentially leadi...

CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

PT-2026-65705

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2026-51992

This CVE ID is rejected or withdrawn by its CVE Numbering Authority and does not represent an active vulnerability entry.

CVE-2025-65340

The kishan0725 Hospital Management System 4.0 is vulnerable to an SQL Injection flaw located in the /betweendates-detailsreports.php component. This vulnerability allows for the improper neutralization of special elements used in an SQL command. While a proof of concept (PoC) is noted in the secu...

PT-2026-65921

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update student.php via parameters fname and student class...

PT-2026-65922

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save user.php via the parameter status...

RHEL 10 : mariadb-connector-c (RHSA-2026:47772)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47772 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes:...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-69942: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-67403

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

CVE-2025-67404

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

CVE-2025-69943

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2025-69943: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...

CVE-2026-65890: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries...

PT-2026-65913

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get doctor.php via the parameters doctor and specilizationid...

CVE-2025-69945: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

CVE-2025-67405: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatepassword.php via the parameter newpassword...

CVE-2026-51992

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. ClickHouse's PostgreSQL integration intentionally allows users with valid PostgreSQL credentials to execute queries against a remote PostgreSQL server. No vulnerability in ClickHouse is exploited; code execution occurs on...