Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.Apr 13, 2026
- Medium5.5A vulnerability was detected in code-projects Faculty Management System 1.0.Apr 13, 2026
- Medium5.5A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- High8.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVApr 13, 2026
- Medium6.8The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injectio…EPSS 0.3%Apr 13, 2026
- Medium5.5A weakness has been identified in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- Medium5.5A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0.Apr 13, 2026
- Medium5.5A vulnerability was identified in code-projects Lost and Found Thing Management 1.0.Apr 13, 2026
- Medium5.5A vulnerability was determined in code-projects Simple ChatBox up to 1.0.Apr 13, 2026
- Medium5.5A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- Medium5.5A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- Medium5.5A vulnerability was found in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- Medium5.5A flaw has been found in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- Medium5.5A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0.Apr 13, 2026
- Medium5.5A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.Apr 13, 2026
- High7.1MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charg…EPSS 0.3%Apr 12, 2026
- High8.8Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries.EPSS 0.3%Apr 12, 2026
- High7.1eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the '…EPSS 0.3%Apr 12, 2026
- High7.1ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thro…EPSS 0.3%Apr 12, 2026
- High7.1Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information…EPSS 0.3%Apr 12, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.EPSS 0.4%Apr 12, 2026
- High7.1ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…EPSS 0.2%Apr 12, 2026
- High7.1Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through…EPSS 0.2%Apr 12, 2026
- Medium6.5The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 9.2.1.Apr 11, 2026