CVE-2026-63774

The Subnet Solutions PowerSYSTEM Center is vulnerable to an SQL Injection (CWE-89) due to insufficient input validation in the report designer . This flaw allows an authenticated user to execute unauthorized SQL commands. The vulnerability carries a CRITICAL severity rating (CVSS 4.0 score of 9.4...

CVE-2026-63774: Subnet Solutions: Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute…

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands...

CVE-2026-86677 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-38211)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter stockname1 within the file/checkcustomerdetails.php. Attackers...

EUVD-2007-1086

Malware in sbrugna...

SQL Injection Vulnerability in Computer Sales and Inventory System

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within t...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38219)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters of the...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38220)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter idd found i...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38223)

Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/manageuser.php. Attackers can exploit...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38232)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the parameter ID of the...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38225)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within t...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38224)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within t...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38231)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletereceiving...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38227)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter Username...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38233)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=saveproduct...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38237)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savesupplier. Attackers ca...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38239)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the /ajax.php?action=savereceiving file’s parameters...

CampCodes Sales and Inventory System /pages/purchase_delete.php File SQL Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. The CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter prid in the file...

osCommerce SQL Injection Vulnerability

osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. An SQL injection vulnerability exists in osCommerce, which originates from the lack of validation of the parameter estimatecountryid in the file /b2b-supermarket/shopping-cart against externally entered...

mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands...