8412 matches found
CVE-2025-9426 itsourcecode Online Tour and Travel Management System package.php sql injection
A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...
CVE-2025-57809
XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21...
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
CVE-2025-56212
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...
CVE-2025-9399
A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file app/logic/Ltool.php. The manipulation of the argument newurl results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. The vendo...
CampCodes Online Water Billing System 安全漏洞
CampCodes Online Water Billing System is an online water billing system from CampCodes Philippines. A security vulnerability exists in CampCodes Online Water Billing System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter ID in the file /editecex.php...
PT-2025-34577
Name of the Vulnerable Software and Affected Versions: YiFang CMS versions up to 2.0.5 Description: A SQL injection issue exists in the file app/logic/L tool.php due to the manipulation of the new url argument. This issue may be exploited remotely. The vendor was contacted but did not respond...
PT-2025-34688 · Unknown · Easyappointments
Name of the Vulnerable Software and Affected Versions: Easy!Appointments version 1.5.1 Description: Easy!Appointments version 1.5.1 contains a SQL injection issue via the order by parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
itsourcecode Online Tour and Travel Management System 安全漏洞
itsourcecode Online Tour and Travel Management System is an open source online tour and travel management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which is caused by a SQL injection due to misuse of the...
Yifang CMS 安全漏洞
Yifang CMS is a PHP enterprise website development and construction management system from China Yifang Company. A security vulnerability exists in Yifang CMS 2.0.5 and earlier versions, which originates from SQL injection of the newurl parameter in the file app/logic/Ltool.php...
Nuclei 3.4.10
Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the orderby parameter...
Linux Distros Unpatched Vulnerability : CVE-2017-5611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in wp-includes/class-wp-query.php in WPQuery in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by...
CVE-2025-56212
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...
ROS-20250825-07
A vulnerability in the PHP adodb class library involves improper escaping of a query parameter. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary SQL statements. SQL statements,...
WhatWeb Scanner 0.6.2
WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...
PT-2025-34684 · Ruoyi-Go · Ruoyi-Go
Name of the Vulnerable Software and Affected Versions: ruoyi-go versions up to 2.1 Description: A weakness exists in the SelectListByPage function of the modules/system/dao/GenTableDao.go file. Manipulation of the isAsc/orderByColumn argument can lead to SQL injection. This issue is potentially...
CVE-2025-56215
CVE-2025-56215 affects phpgurukul Hospital Management System 4.0, with a SQL Injection in contact.php through the pagetitle parameter. The vulnerability is described as an injection flaw in a PHP/MySQL-based system. According to the CVE details, the base impact is Low for confidentiality and inte...
CVE-2025-9391
A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remotely. The exploit has been made...
