PT-2026-97683

Name of the Vulnerable Software and Affected Versions Forma LMS versions prior to 4.1.44 Description A SQL injection issue exists in the Multi-User-Selector AJAX Endpoint. This occurs when the Name argument is manipulated within the UserselectorAdmController::getDataTask function, located in the...

PT-2026-69284

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description A remote SQL injection exists in the /admin/AdminLogin.php endpoint. This issue occurs when the email and password variables are manipulated, allowing an attacker to execute...

PT-2026-68677

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A SQL injection flaw exists in the /viewappointment.php file. A remote attacker can exploit this by manipulating the delid argument, allowing for unauthorized database queries...

CVE-2026-44744: Improper Neutralization of Special Elements used in an SQL Command

SAP S/4HANAOn-Premise contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access...

CVE-2023-27523

Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authenticated user to issue queries on database tables they may not have access to...

BARS.Web-Swods SQL Injection

The vulnerability of the BARS.Web-Swods platform arises from insufficient validation of input data when accessing the form located at the address /Forms/Open?metaName=. Exploitation of this vulnerability allows a malicious actor to execute unauthorized SQL queries against the database of the...