In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability
#cwe-89
共收录 2523 条相关情报。
← 返回所有主题Payload: SQL injection in SQLite/Postgres
CVE-2026-105856
### Impact An attacker who has read plus create or update access to a collection can submit a request that includes a S
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view_product.php. Performin...
CVE-2026-105957
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown func
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection cont...
CVE-2026-105856
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker w
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can ...
CVE-2026-105845
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary ve
Payload: SQL Injection in SQLite and Postgres
CVE-2026-105845
### Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - Y
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search_cla...
CVE-2026-105921
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2
A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file...
CVE-2026-105920
A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2
A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql_query of the file...
CVE-2026-105919
A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql_error of the file login....
CVE-2026-105918
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2
SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The paramet...
CVE-2026-4889
SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user
Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.
CVE-2026-42417
Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.
Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
CVE-2026-42416
Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVE-2026-42415
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
CVE-2026-42414
Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.
CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress Newsletters sendpress allows Blind SQL Injection.This is...
CVE-2026-39795
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in brewlabs SendPress
Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
CVE-2026-39785
Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
CVE-2026-39771
Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVE-2026-39764
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.