Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-36938
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in…
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.
CVE-2026-36937
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in…
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.
CVE-2026-34186
Alta · 8.8
CWE-89 13/04/2026
SQL Injection in Custom Fields leads to Database Compromise
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800
CVE-2026-30813
Alta · 8.8
CWE-89 13/04/2026
SQL Injection in Module Search leads to Database Compromise
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800
CVE-2026-36945
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to…
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.php
CVE-2026-36944
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to…
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php.
CVE-2026-36943
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to…
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php.
CVE-2026-36942
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in…
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.
CVE-2026-36941
Baixa · 2.7
CWE-89 13/04/2026
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in…
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.
CVE-2026-36947
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Oretnom23 Computer And Mobile Repair Shop Management System
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.
CVE-2026-36946
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Oretnom23 Computer And Mobile Repair Shop Management System
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.
CVE-2026-36923
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Oretnom23 Cab Management System
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.
CVE-2026-36922
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Oretnom23 Cab Management System
Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.
CVE-2026-36920
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Janobe Online Reviewer System
Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.
CVE-2026-36919
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Janobe Online Reviewer System
Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.
CVE-2026-36874
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Razormist Basic Library System
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.
CVE-2026-36873
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Razormist Basic Library System
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.
CVE-2026-36872
Baixa · 2.7
CWE-89 13/04/2026
SQL Injection em Razormist Basic Library System
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.
CVE-2026-3830
Alta · 8.6
CWE-89 13/04/2026
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi
The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
CVE-2025-15441
Média · 6.8
CWE-89 13/04/2026
Form Maker < 1.15.38 - SQL Injection
The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.
CVE-2019-25713
Alta · 8.1
CWE-89 12/04/2026
MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter
MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group_total] parameter. Attackers can submit crafted POST requests to the /charge/admin endpoint with error-based, time-based blind, or stacked query payloads to extract sensitive database information or manipulate data.
CVE-2019-25710
Crítica · 9.1
CWE-89 12/04/2026
Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter
Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using error-based SQL injection techniques.
CVE-2019-25707
Alta · 7.1
CWE-89 12/04/2026
eBrigade ERP 4.5 SQL Injection via pdf.php
eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to pdf.php with crafted SQL payloads in the 'id' parameter to extract sensitive database information including table names and schema details.
CVE-2019-25703
Alta · 8.8
CWE-89 12/04/2026
ImpressCMS 1.3.11 SQL Injection via bid Parameter
ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with malicious 'bid' values containing SQL commands to extract sensitive database information.
CVE-2019-25699
Alta · 7.1
CWE-89 12/04/2026
Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search parameter in endpoints like /admin/comment/records, /admin/category/records, /admin/news/records, and /admin/menu/childs to manipulate database queries and retrieve sensitive data.