Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.
CVE-2025-65336
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.
#cwe-89
共收录 2545 条相关情报。
← 返回所有主题Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
CVE-2026-62845
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore driv
The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via ...
CVE-2026-16092
The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via 'meta_key' Custom Field vi
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-15929
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics Sma
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used...
CVE-2026-48448
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure o...
CVE-2026-48448
Adobe Campaign Classic (ACC) 存在 SQL 注入漏洞。攻击者可通过网络远程利用该漏洞，无需用户交互即可实现敏感内存信息泄露，进而获取文件系统读取权限。该漏洞的影响范围发生改变（Scope Changed），机密性
The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via 'meta_key' Custom Field via 'Save and Duplicate' Action in all versions up to, and ...
CVE-2026-16092
WordPress插件Improved Save Button（版本≤1.2.1）存在二阶SQL注入漏洞。该漏洞源于通过'保存并复制'操作中的'meta_key'自定义字段参数，对用户输入转义不足且对现有SQL查询准备不充分。经过身份验证且
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartSh...
CVE-2026-15929
CVE-2026-15929 是 LG Electronics SmartShare 中存在的一个 SQL 注入漏洞。SmartShare 是一款用于 Windows 10 及更早版本系统的媒体共享软件。该漏洞源于对用户输入的特殊元素（如引
DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authenticat...
CVE-2026-5490
DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privi
A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a...
CVE-2026-8339
A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclus
SQL Injection vulnerability in ClickHouse Server Versions <= 26.3.9.8 allows a remote attacker to execute arbitrary code via the create dictionaries function.
CVE-2026-51992
SQL Injection vulnerability in ClickHouse Server Versions <= 26.3.9.8 allows a remote attacker to execute arbitrary code
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.
CVE-2026-65890
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthe
A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration ...
CVE-2026-33385
A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a hig
SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries through direct string interpolation using `str.format()`...
CVE-2026-12895
SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries
The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficie...
CVE-2026-11973
The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in a
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data pas...
CVE-2026-63234
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject thro
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data ...
CVE-2026-63233
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject thro
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data p...
CVE-2026-63232
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject thro
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to ...
CVE-2026-63231
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based
A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identif...
CVE-2026-63230
A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read