Export limit exceeded: 20109 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (20109 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-67407 | 1 Sourcecodester | 1 Sourcecodester Casap Automated Enrollment System | 2026-08-04 | 7.3 High |
| Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_class. | ||||
| CVE-2025-69944 | 1 Campcodes | 1 Hospital Management System | 2026-08-04 | 7.3 High |
| kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter. | ||||
| CVE-2025-69937 | 1 Codeastro | 1 Membership Management System | 2026-08-04 | 9.8 Critical |
| CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id. | ||||
| CVE-2025-69948 | 1 Sourcecodester | 1 Modern Loan Management System | 2026-08-04 | 9.8 Critical |
| SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1. | ||||
| CVE-2026-16539 | 2 Shail Mehta, Wordpress | 2 Sm Page Duplicator, Wordpress | 2026-08-04 | 8.1 High |
| The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks. | ||||
| CVE-2026-16572 | 2 Ajohnwaters, Wordpress | 2 Logmytrip, Wordpress | 2026-08-04 | 8.6 High |
| The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks on any page that renders one of the LogMyTrip WordPress plugin through 1.9's shortcodes. | ||||
| CVE-2026-54658 | 1 Hypequery | 1 Hypequery | 2026-08-04 | 9.8 Critical |
| Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue() in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closing quote and inject arbitrary SQL. This issue is fixed in version 2.0.2. Version 2.0.2 fixes string parameters, while version 2.5.1 fixes all known vectors. Upgrading to 2.5.1 or later is the only complete fix. In versions 2.0.2 through 2.5.0, serializing non-scalar parameters with JSON.stringify() before passing them is a workaround for the object/array vector only. | ||||
| CVE-2026-64631 | 1 Veeam | 1 One | 2026-08-04 | N/A |
| A vulnerability allowing a low-privileged user to inject SQL and extract database contents. | ||||
| CVE-2026-14920 | 2 Acymailing, Wordpress | 2 Acymailing, Wordpress | 2026-08-04 | 8.2 High |
| ## Summary | ||||
| CVE-2026-52472 | 2026-08-04 | 9.8 Critical | ||
| SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file | ||||
| CVE-2026-61294 | 1 Oracle | 1 Common Applications Calendar | 2026-08-04 | 6.3 Medium |
| Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchronizations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data as well as unauthorized read access to a subset of Oracle Common Applications Calendar accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Common Applications Calendar. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). | ||||
| CVE-2026-51077 | 1 Dedecms | 1 Dedecms | 2026-08-04 | N/A |
| SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component | ||||
| CVE-2026-50736 | 1 Enterprisedb | 1 Pglogical | 2026-08-04 | N/A |
| The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privilege level of the apply worker, which is equivalent to a PostgreSQL superuser in default installations. A party acting as the publisher can send crafted queue messages that cause arbitrary SQL to be executed on the subscriber as superuser, escalating from a role permitted to use pglogical to full superuser and breaking the isolation between tenants in shared deployments. To exploit the issue an attacker must be able to direct a subscription at an endpoint they control. In default installations this requires privileges normally reserved for a superuser, so the issue is most relevant to managed deployments where the ability to create subscriptions has been delegated to non-superuser roles. | ||||
| CVE-2025-67403 | 1 Sourcecodester | 1 Casap Automated Enrollment System | 2026-08-04 | 9.8 Critical |
| Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name. | ||||
| CVE-2025-67404 | 1 Sourcecodester | 1 Casap Automated Enrollment System | 2026-08-04 | 9.8 Critical |
| Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class. | ||||
| CVE-2025-69943 | 1 Campcodes | 1 Hospital Management System | 2026-08-04 | 9.8 Critical |
| kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid. | ||||
| CVE-2025-67405 | 1 Sourcecodester | 1 Casap Automated Enrollment System | 2026-08-04 | 7.3 High |
| Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter new_password. | ||||
| CVE-2025-67406 | 1 Mayurik | 1 Advocate Office Management System | 2026-08-04 | 7.3 High |
| https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code (remote). The component is: control/activate_case.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activate_case.php in parameter id endpoint of Advocate office management system. Unsanitized user input in the specified parameter is interpolated directly into an SQL query, allowing attackers to infer or extract data and, in some cases, execute stacked/time-based payloads. ¶¶ Affected Component & Parameter Affected Endpoint URL: http://localhost/advocate/kortex_lite/control/activate_case.php?id=1 HTTP Method: GET Vulnerable File: activate_case.php Parameter: id Vector Location: GET Injection Techniques (as identified by sqlmap) Type: error-based Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE) Payload: id=1 AND EXTRACTVALUE(6268,CONCAT(0x5c,0x71766b6a71,(SELECT (ELT(6268=6268,1))),0x716a7a6b71)) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: id=1 AND (SELECT 4464 FROM (SELECT(SLEEP(5)))aHqo) Proof of Concept (Burp Repeater) | ||||
| CVE-2025-69949 | 1 Campcodes | 1 Hospital Management System | 2026-08-04 | 7.3 High |
| kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email. | ||||
| CVE-2025-65340 | 1 Campcodes | 1 Hospital Management System | 2026-08-04 | 9.8 Critical |
| kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php. | ||||