A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. T...

CVE-2026-77392

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impact

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL...

CVE-2026-68782

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut

历史摘要 · 未重新核验 · GitHub Advisory

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL...

CVE-2026-68789

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut

历史摘要 · 未重新核验 · GitHub Advisory

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

CVE-2026-68789

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

CVE-2026-68782

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut

历史摘要 · 未重新核验 · NVD

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to inject SQL through the meetingId and userId values used by ...

CVE-2026-46682

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to in

历史摘要 · 未重新核验 · NVD

BigBlueButton: Blind SQL Injection AUTH (Moderator)

CVE-2026-46682

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to in

历史摘要 · 未重新核验 · OSV.dev

Fleet: ORDER BY column injection on activity list endpoints

### Summary An authenticated user with read access to Activity could influence the `ORDER BY` clause of the activity li

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the arg...

CVE-2026-77025

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php...

CVE-2026-77020

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is a

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a man...

CVE-2026-77019

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?acti...

CVE-2026-76998

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted elemen

历史摘要 · 未重新核验 · NVD

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save_cate...

CVE-2026-76997

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unkn

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject the string value into the ...

CVE-2026-63039

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. Thi

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through...

CVE-2026-63038

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. Thi

历史摘要 · 未重新核验 · NVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause a...

CVE-2026-63037

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. Thi

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view_order.php. The manipula...

CVE-2026-76996

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown fun

历史摘要 · 未重新核验 · NVD

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the...

CVE-2026-76991

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /view

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of t...

CVE-2026-76990

A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown func

历史摘要 · 未重新核验 · NVD

baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and conf...

CVE-2026-76635

baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administ

历史摘要 · 未重新核验 · NVD