270489 matches found
CVE-2025-69937
CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the id parameter. This vulnerability allows for the insertion of malicious SQL statements into entry fields for execution, which can lead to unauthorized access to the underlying da...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
PT-2026-66411
Name of the Vulnerable Software and Affected Versions Plesk affected versions not specified Description Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection, which is a technique used to manipulate database queries. This allow...
CVE-2026-54368: Improper Neutralization of Special Elements used in an SQL Command
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...
CVE-2026-4978: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...
CVE-2025-69934: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2026-58046: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel...
CVE-2026-15153: Improper Neutralization of Special Elements used in an SQL Command
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
ejabberd -- Multiple security vulnerabilities
ejabberd team reports: It's possible to craft PLAIN auth request and authenticate as one user, but then open session for different one. modcaps persistent cache can be poisoned by using legacy version requests.This cache was only used to determine list of nodes that should trigger notifications i...
PT-2026-66457
Name of the Vulnerable Software and Affected Versions PHP versions 8.2.0 through 8.2.32 PHP versions 8.3.0 through 8.3.32 PHP versions 8.4.0 through 8.4.23 PHP versions 8.5.0 through 8.5.8 Description Improper escaping of backslashes in attacker-provided parameters allows for SQL injection, a...
CVE-2025-69938
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69938
The CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection within the renew.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command, specifically via the membershipType parameter. Attackers can insert malicious SQL statemen...
CVE-2025-69941
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...
CVE-2025-69930
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69936
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...
CVE-2025-65336
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
