SQLi
Monthly
SQL injection in Simple Attendance Record System 2.0 allows remote attackers to manipulate database queries via the 'student' parameter in /check.php, leading to unauthorized data access or modification. A public proof-of-concept exploit is available, though no active exploitation has been reported. The vulnerability can be triggered without authentication or user interaction.
SQL injection in Student File Management 1.0 via /admin/save_student.php enables remote, unauthenticated attackers to manipulate the database through the stud_no parameter. Publicly available exploit code exists, but the vulnerability is not listed in CISA KEV, and the low EPSS score (0.07%) indicates limited exploitation risk. The impact is limited to low confidentiality, integrity, and availability compromises.
SQL injection in itsourcecode Student Management System 1.0 via the ID parameter of /uprec.php allows remote unauthenticated attackers to execute arbitrary SQL commands, potentially reading or modifying the application database. A publicly available proof-of-concept exploit exists, but no active exploitation has been confirmed, and the EPSS score (0.05%) suggests low likelihood of widespread attacks.
SQL injection in itsourcecode Online Pet Shop Management System 1.0 allows remote attackers to manipulate the ID parameter in /pet1/update_cnp.php, potentially leading to unauthorized data access or modification. A publicly available exploit exists, though no active exploitation has been confirmed. EPSS indicates low exploitation probability (0.05%).
SQL injection in Online Pet Shop Management System 1.0 (by itsourcecode/Facebook Riares) allows unauthenticated remote attackers to manipulate database queries via the `cnpname` parameter in `/pet1/addcnp.php`. A public proof-of-concept exploit exists on GitHub. Despite the PR:N CVSS vector indicating no authentication is required, real-world risk is constrained by the product's negligible deployment footprint - this is a freely distributed PHP student/demo project, not enterprise software. EPSS of 0.05% (15th percentile) reflects the low likelihood of opportunistic exploitation.
SQL injection in Student File Management System 1.0 at /admin/update_student.php via the stud_id parameter allows remote attackers to read or modify database contents without authentication. Exploit code is publicly available, though no active exploitation has been confirmed.
SQL injection in Student File Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the firstname parameter in /admin/save_user.php. Exploit code is publicly available, but no reports of active exploitation exist at this time. The vulnerability has a CVSS 4.0 base score of 5.5 (low impact) and an EPSS score of 0.07%, indicating low exploitation probability.
SQL injection in Student File Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the user_id parameter in /admin/update_user.php. Public exploit code is available on GitHub, but the EPSS score (0.05%) indicates low exploitation probability and no active exploitation is confirmed (not in CISA KEV). The vulnerability is easy to exploit but yields only limited data confidentiality, integrity, and availability impacts.
SQL injection in Student File Management System 1.0 allows remote attackers to manipulate database queries via the Username parameter of /admin/login_query.php. The vulnerability, with publicly available exploit code, enables low-impact data extraction or modification without authentication. At the time of analysis, it is not listed in CISA's KEV, and EPSS indicates low exploitation probability.
SQL injection in code-projects Student File Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the stud_no parameter in login_query.php. A public exploit is available, but EPSS indicates a low probability of widespread exploitation (0.07%); the vulnerability is not listed in CISA KEV.
SQL injection vulnerability in code-projects Prison Management System 2.0 allows remote attackers to manipulate the keyname parameter in /admin/search1.php, potentially leading to low-impact data exposure and modification. The vulnerability is publicly known with exploit code available, but no active exploitation has been reported. EPSS predicts a 0.05% chance of exploitation.
SQL injection in code-projects Prison Management System 2.0 allows authenticated remote attackers to execute arbitrary SQL commands via the keyname parameter in /admin/search.php, with publicly available exploit code but limited real-world impact due to authentication requirement and restricted scope (confidentiality only, CVSS 2.1).
Remote SQL injection in itsourcecode Student Management System 1.0 allows unauthenticated attackers to manipulate database queries via the 'ID' parameter in /update_program.php. Public exploit code is available, though no active exploitation has been confirmed through CISA KEV and EPSS indicates low probability of widespread exploitation.
Unsanitized user input in the 'Name' parameter of /pet1/available.php in itsourcecode Online Pet Shop Management System 1.0 allows remote unauthenticated SQL injection against the backend database. Attackers can exfiltrate or alter database records; exploit code is publicly available. No active exploitation has been reported, and EPSS indicates a very low probability of widespread attacks.
SQL injection in COVID Tracking System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL via the ID parameter in the admin zone page. Exploit code is publicly available, though no active exploitation is confirmed. The vulnerability carries a CVSS 4.0 base score of 5.5 and a low EPSS probability (0.07%), indicating limited real-world risk despite the public exploit.
SQL injection in itsourcecode COVID Tracking System 1.0 allows remote attackers to manipulate database queries via the Username parameter of the Admin Login page. A public exploit is available, but the EPSS exploitation probability is very low (0.05%), and the vulnerability is not listed in CISA KEV, indicating no known active exploitation at this time. The flaw can lead to unauthorized data access or authentication bypass.
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to manipulate database queries via an unsanitized ID parameter in /update_account.php, potentially leading to unauthorized data modification or access. Public exploit code is available, but EPSS indicates low exploitation probability.
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate database queries via the roll_number parameter in /borrow_book.php. Public exploit code is available, though no active exploitation or vendor patch has been confirmed. The EPSS score indicates a very low probability of widespread exploitation at this time.
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the admin_id parameter in /view_admin.php. This can result in low-impact data disclosure, tampering, or denial of service against the backend database. While a public exploit exists, the vulnerability is not known to be actively exploited in the wild and has a very low EPSS score.
SQL injection in haxxorsid Stock-Management-System up to commit fbbbf213e9c93b87183a3891f77e3cc7095f22b0 allows authenticated remote attackers to execute arbitrary SQL queries via manipulation of the employee_id, id, or admin parameters in model/User.php. The vulnerability has a low CVSS score (2.1) due to limited scope and impact, but carries low but non-zero exploitation probability (EPSS 0.05%). Public exploit code exists and the product is no longer maintained, eliminating vendor-supplied patch availability.
Remote SQL injection in kidaze CourseSelectionSystem through an unknown function in /Profilers/SProfile/reg.php allows unauthenticated attackers to manipulate database queries via the USN parameter. A proof-of-concept exploit is publicly available, but EPSS data indicates a low exploitation probability (0.05%); no active exploitation has been reported.
SQL injection in kidaze CourseSelectionSystem allows unauthenticated remote attackers to execute arbitrary SQL commands via the Username parameter in the login endpoint /Profilers/SProfile/login1.php. Public exploit code is available, though EPSS indicates a very low probability of widespread exploitation. The vulnerability has low confidentiality, integrity, and availability impacts according to CVSS v4.0 scoring.
SQL injection in code-projects Class and Exam Timetable Management 1.0 allows remote attackers to manipulate database queries. The vulnerability resides in the /preview7.php endpoint, where the course_year_section or semester parameter can be abused without authentication. Public exploit code is available, but no evidence of active exploitation in the wild or CISA KEV listing exists.
SQL injection vulnerability in the Class and Exam Timetable Management System v1.0 login page allows remote, unauthenticated attackers to inject arbitrary SQL via the username and password fields in /index.php. Exploit code is publicly available, though no active exploitation has been confirmed (not in CISA KEV), and EPSS indicates a low exploitation probability.
Remote SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 allows unauthenticated attackers to manipulate the 'pid' argument in /admin/admin_running.php, leading to potential data exposure or modification. Exploit code is publicly available but no active exploitation has been confirmed (not in CISA KEV); the EPSS score of 0.05% indicates low probability of widespread exploitation despite the low attack complexity and no authentication requirement.
SQL injection in projectworlds Advanced Library Management System 1.0 allows unauthenticated remote attackers to compromise database integrity, confidentiality, and availability via the book_id parameter in /view_book.php. Public proof-of-concept exploit code exists, but the software's niche deployment footprint and low EPSS exploitation probability (0.05%) suggest limited real-world impact; no active exploitation is confirmed by CISA KEV.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtunitDetails parameter in /admin/add_unit.php. Public exploit code is available, but EPSS indicates low exploitation probability (0.05%) and it is not listed in CISA KEV.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate database queries via the `txtDistributorAddress` parameter in `/admin/add_distributor.php`. Public exploit code is available, though the EPSS score indicates a very low probability of widespread exploitation.
A SQL injection vulnerability exists in LangGraph SQLite Checkpoint, an implementation of LangGraph CheckpointSaver for SQLite databases. The vulnerability affects versions 3.0.0 and below of the langgraph-checkpoint-sqlite Python package, allowing attackers with local access and low privileges to manipulate SQL queries through unvalidated metadata filter keys in checkpoint search operations. A proof-of-concept exploit is publicly available, though the EPSS score of 0.02% (6th percentile) suggests minimal active exploitation in the wild currently.
SQL injection in itsourcecode Student Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the grade parameter in /new_grade.php. Publicly available exploit code exists, but the EPSS score is low (0.05%) and no active exploitation has been reported via CISA KEV, suggesting limited interest or targeting.
SQL injection in itsourcecode Student Management System 1.0's promote.php endpoint allows remote attackers to manipulate the 'sy' parameter to execute arbitrary SQL queries, leading to potential data exposure or modification. A public proof-of-concept exploit exists, but there is no indication of active exploitation. The EPSS score
SQL injection vulnerability in itsourcecode Student Management System version 1.0 allows remote attackers to manipulate database queries via the sy parameter in /new_school_year.php. Exploit code is publicly available, though no active exploitation has been confirmed by CISA KEV. The low EPSS score (0.05%) suggests limited exploitability in practice.
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to manipulate the Name parameter in /new_adviser.php to execute arbitrary SQL commands. An exploit is publicly available, though no active exploitation is confirmed (not in CISA KEV); EPSS score is low (0.05%).
Authenticated SQL injection in the Media Library Tools WordPress plugin (≤1.6.15) allows high-privilege attackers to extract sensitive database information, with CVSS 7.6 signaling high confidentiality impact but limited integrity impact; no active exploitation or public exploit code is known, and EPSS indicates very low exploitation probability (0.06%).
SQL injection in the Ninja Tables WordPress plugin (≤5.2.3) enables authenticated administrators to extract sensitive database contents. The flaw allows high-privileged users to perform unauthorized SQL queries, compromising confidentiality with limited availability impact. No active exploitation or public PoC has been reported, and EPSS indicates very low exploitation probability.
Blind SQL injection in LambertGroup Accordion Slider PRO WordPress plugin versions through 1.2 allows authenticated attackers to exfiltrate sensitive database information. An attacker with low-privilege access (such as a subscriber) can execute arbitrary SQL queries via vulnerable plugin parameters, potentially accessing all database contents. No public exploit code or active exploitation has been reported, though the vulnerability carries a high confidentiality impact.
Blind SQL injection in the ArtPlacer Widget WordPress plugin (versions through 2.22.9.2) allows an authenticated low-privilege attacker to extract database contents via crafted requests to a vulnerable endpoint. The vulnerability carries a scope-changed CVSS rating because the WordPress database is shared across plugins and core, meaning successful exploitation can expose credentials, user data, and content belonging to other installed components - not just the ArtPlacer plugin itself. No public exploit code or active exploitation has been identified at time of analysis, and the low EPSS score (0.06%, 19th percentile) reflects minimal current attacker interest.
Blind SQL injection in Agile Logix Store Locator WordPress plugin version 1.6.2 and below allows authenticated low-privileged users (e.g., subscriber) to extract sensitive data from the WordPress database
SQL injection in the WordPress plugin Image&Video FullScreen Background through version 1.6.7 allows authenticated attackers with low privileges to extract sensitive information from the database. The vulnerability has a high confidentiality impact but does not permit data modification. No public exploit or active exploitation has been reported, and the EPSS score of 0.05% indicates a low probability of real-world attacks.
Unauthenticated SQL injection in Talent Software UNIS versions prior to 42321 allows remote attackers to manipulate backend database queries over the network without any authentication or user interaction. The vulnerability carries a CVSS 9.8 rating reflecting full compromise potential across confidentiality, integrity, and availability, and was reported by Turkey's national CSIRT (USOM), though no public exploit code or CISA KEV listing has been identified at time of analysis.
SQL injection in Frappe HelpDesk 1.14.0 dashboard functionality allows authenticated attackers to execute arbitrary SQL queries via the get_dashboard_data endpoint. Unsafe concatenation of user-controlled parameters into dynamic SQL statements enables data exfiltration and database manipulation. Publicly available exploit code exists. With CVSS 8.6 (Network/Low Complexity/Low Privilege Required), this represents a high-severity risk for organizations running the affected version, though no active exploitation (CISA KEV) has been confirmed.
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers to modify or retrieve database contents via the per_id parameter in edit_personnel.php. Exploit code is publicly available, but no active exploitation has been confirmed.
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.
SQL injection in Jshop MiniProgram Mall System 2.9.0 via the cat_id parameter of /index.php/api.html allows low-privileged remote attackers to perform unauthorized database operations, including data extraction or modification. Public exploit code is available
Remote SQL injection in Student Management System 1.0 via the sub parameter in /newsubject.php allows unauthenticated attackers to manipulate database queries. A publicly available proof-of-concept exists, but no active exploitation has been confirmed. Exploitation probability is low (EPSS 0.04%), though the vulnerability is easily triggered over the network without authentication.
SQL injection in Student Management System 1.0 allows remote attackers to manipulate the ID parameter in /newrecord.php, potentially reading or modifying database contents. Exploit code is publicly available, though the EPSS exploitation probability is low (0.04%). No active exploitation has been reported by CISA KEV.
SQL injection in Student Management System 1.0 allows remote attackers to manipulate the 'ID' parameter in /newcurriculm.php, potentially leading to unauthorized database access. Public exploit code exists, but EPSS exploitation probability is negligible (0.04%), and no active exploitation has been reported. The affected product is a niche academic application, limiting real-world impact.
SQL injection in the admin login of Online Ordering System 1.0 allows remote, unauthenticated attackers to manipulate the Username parameter to execute unauthorized SQL commands, potentially leading to data extraction, modification, or authentication bypass. Exploit code is publicly available, but the low EPSS score (0.04%) and lack of CISA KEV listing indicate no active widespread exploitation at this time.
SQL injection in Online Ordering System 1.0 allows remote attackers to extract or modify database contents via the Name parameter in /user_contact.php. Public exploit code is available, but no evidence of active exploitation exists. EPSS is very low (0.04%), indicating minimal real-world impact.
SQL injection in Online Ordering System 1.0 allows remote attackers to inject arbitrary SQL via the product_id parameter of /user_school.php, enabling data extraction or manipulation. Exploit code is publicly available, though no active exploitation has been confirmed by CISA or threat intelligence feeds.
Unauthenticated SQL injection in Simple Shopping Cart 1.0 via the admin_username parameter on /adminlogin.php allows remote attackers to extract sensitive data or bypass authentication. A proof-of-concept exploit is publicly available, though no active exploitation has been reported in CISA KEV. The vulnerability affects code-projects/fabian's PHP-based shopping cart software.
SQL injection in Simple Shopping Cart 1.0 allows authenticated remote attackers to manipulate the item_name parameter in /Admin/additems.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation has been confirmed, and a low EPSS score (0.04%) indicates minimal immediate risk.
SQL injection in Simple Shopping Cart 1.0 allows authenticated remote attackers to manipulate database queries via the user_id parameter in /Customers/settings.php. While the CVSS 4.0 base score is only 2.1 (Low), public exploit code is available, enabling authenticated attackers to read or modify database contents. The EPSS score of 0.04% and absence from CISA KEV suggest low real-world exploitation probability, but organizations using this product should assess internal risk based on stored data sensitivity.
SQL injection in IdeaCMS up to version 1.8 permits unauthenticated remote attackers to execute arbitrary SQL commands via the params argument in Coupon.php's whereRaw function. A public exploit is available, but the EPSS exploitation probability is low (0.04%), and no active exploitation is confirmed.
SQL injection in Daily Time Recording System 4.5.0 allows remote authenticated (low‑privilege) attackers to inject arbitrary SQL via the detail_Id parameter of /admin/add_payroll.php, enabling limited data disclosure, modification, or service disruption. A public proof‑of‑concept exploit exists, though the EPSS score of 0.04% suggests very low exploitation probability and no active exploitation has been confirmed.
SQL injection in Philipinho Simple-PHP-Blog up to commit 94b5d3e allows low-privileged remote attackers to manipulate SQL queries via the /edit.php endpoint. An exploit is publicly available, but no active exploitation in the wild is reported. EPSS probability is very low (0.04%).
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to extract or modify database data by manipulating the 'fname' parameter in /edit_user.php. The exploit is publicly available, but no active exploitation has been confirmed, and the EPSS score is very low (0.04%), indicating minimal real-world likelihood.
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
SQL injection in Simple Leave Manager 1.0 allows remote attackers to manipulate the staff_id parameter in /request.php to execute arbitrary SQL commands, potentially leading to unauthorized data access, modification, or deletion. A public exploit is available but no active exploitation has been confirmed by CISA KEV.
SQL injection in Employee Profile Management System 1.0 enables authenticated remote attackers to inject arbitrary SQL via the per_id parameter in the /print_personnel_report.php endpoint. Public exploit code is available, though active exploitation is not confirmed. The flaw can lead to data leakage or manipulation.
Unsanitized ID parameter in /editotheraccount.php of code-projects Currency Exchange System 1.0 leads to SQL injection, allowing remote unauthenticated attackers to read, modify, or disrupt database contents with low confidentiality, integrity, and availability impact. Public exploit code is available; no active exploitation reported in CISA KEV. EPSS indicates a 0.04% probability of exploitation.
SQL injection in the Currency Exchange System 1.0 application allows unauthenticated remote attackers to manipulate SQL queries via the ID parameter in /edttrns.php. This can lead to unauthorized access to database contents or modification of exchange records. A publicly available proof-of-concept exploit exists, though no active exploitation has been confirmed.
SQL injection in code-projects Currency Exchange System 1.0 allows remote unauthenticated attackers to manipulate database queries by supplying a crafted `ID` parameter to `/viewserial.php`, potentially reading, modifying, or deleting backend database content. The affected product is a hobbyist PHP demo application distributed via code-projects.org; a proof-of-concept exploit has been publicly disclosed on GitHub. No patch has been released and the application appears to be a static demo artifact rather than an actively maintained codebase, making remediation unlikely outside of decommissioning.
SQL injection in Currency Exchange System 1.0 via the ID parameter in /edit.php allows remote attackers to manipulate database queries without authentication. Public exploit code exists, but EPSS probability is very low (0.04%) and no active exploitation is confirmed, indicating limited real-world targeting.
SQL injection in itsourcecode Student Information System 1.0 allows authenticated attackers to manipulate database queries via the ID parameter in the /section_edit1.php script. Proof-of-concept exploit code is publicly available, but exploitation requires low-privilege authentication and EPSS indicates very low likelihood of widespread exploitation.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject SQL via the roll_number parameter in /member_search.php. Exploit code is publicly available, but EPSS score is low (0.04%) and no active exploitation has been confirmed by CISA. Attackers may read, modify, or delete database entries depending on database user privileges.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the book_id parameter in /delete_book.php, potentially resulting in unauthorized data access or modification. No authentication is required, and public exploit code is available, as documented by VulDB and NVD.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate the user_id parameter in /delete_member.php, potentially leading to unauthorized database access or data modification. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%), and no active exploitation has been confirmed through CISA KEV.
SQL injection in Campcodes School File Management System 1.0 allows unauthenticated remote attackers to inject SQL via the stud_id parameter in /update_query.php. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%) and the CISA KEV catalog does not list it. The vulnerability has a CVSS 4.0 score of 5.5 (Medium), reflecting limited impact on confidentiality, integrity, and availability.
SQL injection in the tushar-2223 Hotel-Management-System PHP project allows remote attackers to manipulate database queries via the `ID` parameter in `/admin/invoiceprint.php`. The affected codebase is pinned to rolling-release commit bb1f3b3, with no versioned patch available. A publicly available exploit report exists on GitHub (yaklang/IRifyScanResult), though EPSS at 0.04% (13th percentile) indicates negligible real-world exploitation activity - consistent with the project's extremely limited production footprint. No confirmed active exploitation (no CISA KEV entry).
SQL injection in code-projects Question Paper Generator 1.0 allows remote authenticated attackers to manipulate the subid parameter in /selectquestionuser.php, leading to limited data disclosure, modification, or service disruption. Exploit code is publicly available, though the EPSS score of 0.04% indicates extremely low probability of widespread exploitation.
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers with low privileges to manipulate the per_id parameter in /view_personnel.php, potentially leading to unauthorized database access. A public proof-of-concept exploit is available, but EPSS data indicates a low exploitation probability (0.04%) and there is no evidence of active exploitation in the wild. The vulnerability has been assigned CVE-2025-14193 and affects a niche application, limiting widespread risk.
We are to generate a comprehensive analysis based on the provided data, following the strict JSON output format. Let's break down the input: - CVE: CVE-2025-14192 - Description: Vulnerability in RashminDungrani online-banking up to commit hash 2337ad552ea9d385b4e07b90e6f32d011b7c68a2. File /site/dist/auth_login.php, Username argument leads to SQL injection. Remote attack. Exploit public. Rolling releases, no version details. Vendor did not respond. - CVSS Score: 5.5 (this is likely a CVSS v4.0 base score given the vector) - CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X (this is a CVSS 4.0 vector, with E:P indicating exploit code maturity is proof-of-concept, and other supplemental metrics as X not defined) - CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')) - EPSS: 0.04% (13th percentile) - very low. - KEV: not mentioned, so not in CISA KEV. - Patch availability: The description says "Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available." Also vendor did not respond. So no clear patch version. However, the vulnerability might be fixed in some later commit? Since rolling releases, the commit hash might be the known affected one, but later commits may have fixed it silently? In remediation, we must note that no official patch version is available, but the GitHub repo might have updates. - Tags: SQLi, PHP - CPE strings: not explicitly given, but affected versions from EUVD: online-banking 2337ad552ea9d385b4e07b90e6f32d011b7c68a2. This suggests the product is a specific GitHub repository. So we can derive product name: "online-banking" by RashminDungrani. - References: a GitHub file showing exploit? The first link is a docx file "online-banking-have-sql.docx" which likely conta
SQL injection in Chanjet TPlus through version 20251121 allows remote unauthenticated attackers to manipulate the currentAccId parameter in the MultiCompanySettingController ASHX handler, leading to limited data tampering, information disclosure, and service disruption. Public exploit code is available; however, no active exploitation has been confirmed (not listed in CISA KEV), and EPSS indicates low probability of widespread attacks.
SQL injection in Chanjet CRM up to version 20251121 allows remote attackers to manipulate database queries via the gblOrgID parameter in /tools/jxf_dump_table_demo.php. Public exploit code is available, enabling practical attacks despite a low EPSS exploitation probability of 0.04%. The vendor has not responded to disclosure, leaving no official patch.
SQL injection in Yonyou U8 Cloud 5.0, 5.0sp, 5.1, and 5.1sp allows authenticated remote attackers to manipulate database queries via the usercode parameter in the AppServletService endpoint. Public exploit code is available, and the vendor has not responded to disclosure, though no active exploitation has been confirmed in the wild. The low CVSS v4.0 base score (2.1) and minimal EPSS (0.04%) indicate a currently low risk, but the ease of exploitation merits prompt attention.
Blind SQL injection in the AI Autotagger with OpenAI WordPress plugin allows authenticated attackers with Contributor-level access and AI metabox permissions to extract sensitive database information via time-based techniques. The vulnerability resides in the AI preview AJAX endpoint's 'existing_terms_orderby' parameter and affects versions up to 3.40.1. No active exploitation has been confirmed at this time, and the EPSS score indicates a very low probability of widespread exploitation.
SQL injection in PHP-Guitar-Shop allows remote, unauthenticated attackers to manipulate the ID parameter of /product.php, compromising the underlying database with low impact. All rolling-release versions up to commit 6ce0868889 are affected, and a public proof-of-concept exploit is available. Despite the network-accessible attack vector, EPSS indicates a very low probability of real-world exploitation.
Authenticated SQL injection in AMTT HiBOS 1.0 allows remote administrators to inject arbitrary SQL via the ID parameter in cardmake_down.php, leading to low-impact data manipulation. Exploit code is publicly available but requires administrative credentials, significantly limiting real-world risk. No active exploitation is reported.
The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 3.6.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.
Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can use UNION-based injection to extract sensitive information from the users table including usernames and passwords.
dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.
SQL injection in JIZHICMS up to version 2.5.5 allows remote authenticated attackers to execute arbitrary SQL commands via the batch comment deletion functionality, potentially leading to data manipulation or unauthorized access to the database. A public proof-of-concept exploit is available, and the vendor has not released a
SQL injection in JIZHICMS up to 2.5.5 allows remotely authenticated attackers with high privileges to execute arbitrary SQL commands via the 'aid' or 'tid' parameters in the comment administration interface. Successful exploitation could lead to unauthorized reading or modification of database contents. Public exploit code is available, but no active exploitation is confirmed, and EPSS predicts very low exploitation probability.
## Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API
The Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database granted they have metabox access for the taxonomy (enabled by default for contributors).
The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.
SQL injection in Simple Attendance Record System 2.0 allows remote attackers to manipulate database queries via the 'student' parameter in /check.php, leading to unauthorized data access or modification. A public proof-of-concept exploit is available, though no active exploitation has been reported. The vulnerability can be triggered without authentication or user interaction.
SQL injection in Student File Management 1.0 via /admin/save_student.php enables remote, unauthenticated attackers to manipulate the database through the stud_no parameter. Publicly available exploit code exists, but the vulnerability is not listed in CISA KEV, and the low EPSS score (0.07%) indicates limited exploitation risk. The impact is limited to low confidentiality, integrity, and availability compromises.
SQL injection in itsourcecode Student Management System 1.0 via the ID parameter of /uprec.php allows remote unauthenticated attackers to execute arbitrary SQL commands, potentially reading or modifying the application database. A publicly available proof-of-concept exploit exists, but no active exploitation has been confirmed, and the EPSS score (0.05%) suggests low likelihood of widespread attacks.
SQL injection in itsourcecode Online Pet Shop Management System 1.0 allows remote attackers to manipulate the ID parameter in /pet1/update_cnp.php, potentially leading to unauthorized data access or modification. A publicly available exploit exists, though no active exploitation has been confirmed. EPSS indicates low exploitation probability (0.05%).
SQL injection in Online Pet Shop Management System 1.0 (by itsourcecode/Facebook Riares) allows unauthenticated remote attackers to manipulate database queries via the `cnpname` parameter in `/pet1/addcnp.php`. A public proof-of-concept exploit exists on GitHub. Despite the PR:N CVSS vector indicating no authentication is required, real-world risk is constrained by the product's negligible deployment footprint - this is a freely distributed PHP student/demo project, not enterprise software. EPSS of 0.05% (15th percentile) reflects the low likelihood of opportunistic exploitation.
SQL injection in Student File Management System 1.0 at /admin/update_student.php via the stud_id parameter allows remote attackers to read or modify database contents without authentication. Exploit code is publicly available, though no active exploitation has been confirmed.
SQL injection in Student File Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the firstname parameter in /admin/save_user.php. Exploit code is publicly available, but no reports of active exploitation exist at this time. The vulnerability has a CVSS 4.0 base score of 5.5 (low impact) and an EPSS score of 0.07%, indicating low exploitation probability.
SQL injection in Student File Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the user_id parameter in /admin/update_user.php. Public exploit code is available on GitHub, but the EPSS score (0.05%) indicates low exploitation probability and no active exploitation is confirmed (not in CISA KEV). The vulnerability is easy to exploit but yields only limited data confidentiality, integrity, and availability impacts.
SQL injection in Student File Management System 1.0 allows remote attackers to manipulate database queries via the Username parameter of /admin/login_query.php. The vulnerability, with publicly available exploit code, enables low-impact data extraction or modification without authentication. At the time of analysis, it is not listed in CISA's KEV, and EPSS indicates low exploitation probability.
SQL injection in code-projects Student File Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the stud_no parameter in login_query.php. A public exploit is available, but EPSS indicates a low probability of widespread exploitation (0.07%); the vulnerability is not listed in CISA KEV.
SQL injection vulnerability in code-projects Prison Management System 2.0 allows remote attackers to manipulate the keyname parameter in /admin/search1.php, potentially leading to low-impact data exposure and modification. The vulnerability is publicly known with exploit code available, but no active exploitation has been reported. EPSS predicts a 0.05% chance of exploitation.
SQL injection in code-projects Prison Management System 2.0 allows authenticated remote attackers to execute arbitrary SQL commands via the keyname parameter in /admin/search.php, with publicly available exploit code but limited real-world impact due to authentication requirement and restricted scope (confidentiality only, CVSS 2.1).
Remote SQL injection in itsourcecode Student Management System 1.0 allows unauthenticated attackers to manipulate database queries via the 'ID' parameter in /update_program.php. Public exploit code is available, though no active exploitation has been confirmed through CISA KEV and EPSS indicates low probability of widespread exploitation.
Unsanitized user input in the 'Name' parameter of /pet1/available.php in itsourcecode Online Pet Shop Management System 1.0 allows remote unauthenticated SQL injection against the backend database. Attackers can exfiltrate or alter database records; exploit code is publicly available. No active exploitation has been reported, and EPSS indicates a very low probability of widespread attacks.
SQL injection in COVID Tracking System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL via the ID parameter in the admin zone page. Exploit code is publicly available, though no active exploitation is confirmed. The vulnerability carries a CVSS 4.0 base score of 5.5 and a low EPSS probability (0.07%), indicating limited real-world risk despite the public exploit.
SQL injection in itsourcecode COVID Tracking System 1.0 allows remote attackers to manipulate database queries via the Username parameter of the Admin Login page. A public exploit is available, but the EPSS exploitation probability is very low (0.05%), and the vulnerability is not listed in CISA KEV, indicating no known active exploitation at this time. The flaw can lead to unauthorized data access or authentication bypass.
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to manipulate database queries via an unsanitized ID parameter in /update_account.php, potentially leading to unauthorized data modification or access. Public exploit code is available, but EPSS indicates low exploitation probability.
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate database queries via the roll_number parameter in /borrow_book.php. Public exploit code is available, though no active exploitation or vendor patch has been confirmed. The EPSS score indicates a very low probability of widespread exploitation at this time.
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the admin_id parameter in /view_admin.php. This can result in low-impact data disclosure, tampering, or denial of service against the backend database. While a public exploit exists, the vulnerability is not known to be actively exploited in the wild and has a very low EPSS score.
SQL injection in haxxorsid Stock-Management-System up to commit fbbbf213e9c93b87183a3891f77e3cc7095f22b0 allows authenticated remote attackers to execute arbitrary SQL queries via manipulation of the employee_id, id, or admin parameters in model/User.php. The vulnerability has a low CVSS score (2.1) due to limited scope and impact, but carries low but non-zero exploitation probability (EPSS 0.05%). Public exploit code exists and the product is no longer maintained, eliminating vendor-supplied patch availability.
Remote SQL injection in kidaze CourseSelectionSystem through an unknown function in /Profilers/SProfile/reg.php allows unauthenticated attackers to manipulate database queries via the USN parameter. A proof-of-concept exploit is publicly available, but EPSS data indicates a low exploitation probability (0.05%); no active exploitation has been reported.
SQL injection in kidaze CourseSelectionSystem allows unauthenticated remote attackers to execute arbitrary SQL commands via the Username parameter in the login endpoint /Profilers/SProfile/login1.php. Public exploit code is available, though EPSS indicates a very low probability of widespread exploitation. The vulnerability has low confidentiality, integrity, and availability impacts according to CVSS v4.0 scoring.
SQL injection in code-projects Class and Exam Timetable Management 1.0 allows remote attackers to manipulate database queries. The vulnerability resides in the /preview7.php endpoint, where the course_year_section or semester parameter can be abused without authentication. Public exploit code is available, but no evidence of active exploitation in the wild or CISA KEV listing exists.
SQL injection vulnerability in the Class and Exam Timetable Management System v1.0 login page allows remote, unauthenticated attackers to inject arbitrary SQL via the username and password fields in /index.php. Exploit code is publicly available, though no active exploitation has been confirmed (not in CISA KEV), and EPSS indicates a low exploitation probability.
Remote SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 allows unauthenticated attackers to manipulate the 'pid' argument in /admin/admin_running.php, leading to potential data exposure or modification. Exploit code is publicly available but no active exploitation has been confirmed (not in CISA KEV); the EPSS score of 0.05% indicates low probability of widespread exploitation despite the low attack complexity and no authentication requirement.
SQL injection in projectworlds Advanced Library Management System 1.0 allows unauthenticated remote attackers to compromise database integrity, confidentiality, and availability via the book_id parameter in /view_book.php. Public proof-of-concept exploit code exists, but the software's niche deployment footprint and low EPSS exploitation probability (0.05%) suggest limited real-world impact; no active exploitation is confirmed by CISA KEV.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtunitDetails parameter in /admin/add_unit.php. Public exploit code is available, but EPSS indicates low exploitation probability (0.05%) and it is not listed in CISA KEV.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate database queries via the `txtDistributorAddress` parameter in `/admin/add_distributor.php`. Public exploit code is available, though the EPSS score indicates a very low probability of widespread exploitation.
A SQL injection vulnerability exists in LangGraph SQLite Checkpoint, an implementation of LangGraph CheckpointSaver for SQLite databases. The vulnerability affects versions 3.0.0 and below of the langgraph-checkpoint-sqlite Python package, allowing attackers with local access and low privileges to manipulate SQL queries through unvalidated metadata filter keys in checkpoint search operations. A proof-of-concept exploit is publicly available, though the EPSS score of 0.02% (6th percentile) suggests minimal active exploitation in the wild currently.
SQL injection in itsourcecode Student Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the grade parameter in /new_grade.php. Publicly available exploit code exists, but the EPSS score is low (0.05%) and no active exploitation has been reported via CISA KEV, suggesting limited interest or targeting.
SQL injection in itsourcecode Student Management System 1.0's promote.php endpoint allows remote attackers to manipulate the 'sy' parameter to execute arbitrary SQL queries, leading to potential data exposure or modification. A public proof-of-concept exploit exists, but there is no indication of active exploitation. The EPSS score
SQL injection vulnerability in itsourcecode Student Management System version 1.0 allows remote attackers to manipulate database queries via the sy parameter in /new_school_year.php. Exploit code is publicly available, though no active exploitation has been confirmed by CISA KEV. The low EPSS score (0.05%) suggests limited exploitability in practice.
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to manipulate the Name parameter in /new_adviser.php to execute arbitrary SQL commands. An exploit is publicly available, though no active exploitation is confirmed (not in CISA KEV); EPSS score is low (0.05%).
Authenticated SQL injection in the Media Library Tools WordPress plugin (≤1.6.15) allows high-privilege attackers to extract sensitive database information, with CVSS 7.6 signaling high confidentiality impact but limited integrity impact; no active exploitation or public exploit code is known, and EPSS indicates very low exploitation probability (0.06%).
SQL injection in the Ninja Tables WordPress plugin (≤5.2.3) enables authenticated administrators to extract sensitive database contents. The flaw allows high-privileged users to perform unauthorized SQL queries, compromising confidentiality with limited availability impact. No active exploitation or public PoC has been reported, and EPSS indicates very low exploitation probability.
Blind SQL injection in LambertGroup Accordion Slider PRO WordPress plugin versions through 1.2 allows authenticated attackers to exfiltrate sensitive database information. An attacker with low-privilege access (such as a subscriber) can execute arbitrary SQL queries via vulnerable plugin parameters, potentially accessing all database contents. No public exploit code or active exploitation has been reported, though the vulnerability carries a high confidentiality impact.
Blind SQL injection in the ArtPlacer Widget WordPress plugin (versions through 2.22.9.2) allows an authenticated low-privilege attacker to extract database contents via crafted requests to a vulnerable endpoint. The vulnerability carries a scope-changed CVSS rating because the WordPress database is shared across plugins and core, meaning successful exploitation can expose credentials, user data, and content belonging to other installed components - not just the ArtPlacer plugin itself. No public exploit code or active exploitation has been identified at time of analysis, and the low EPSS score (0.06%, 19th percentile) reflects minimal current attacker interest.
Blind SQL injection in Agile Logix Store Locator WordPress plugin version 1.6.2 and below allows authenticated low-privileged users (e.g., subscriber) to extract sensitive data from the WordPress database
SQL injection in the WordPress plugin Image&Video FullScreen Background through version 1.6.7 allows authenticated attackers with low privileges to extract sensitive information from the database. The vulnerability has a high confidentiality impact but does not permit data modification. No public exploit or active exploitation has been reported, and the EPSS score of 0.05% indicates a low probability of real-world attacks.
Unauthenticated SQL injection in Talent Software UNIS versions prior to 42321 allows remote attackers to manipulate backend database queries over the network without any authentication or user interaction. The vulnerability carries a CVSS 9.8 rating reflecting full compromise potential across confidentiality, integrity, and availability, and was reported by Turkey's national CSIRT (USOM), though no public exploit code or CISA KEV listing has been identified at time of analysis.
SQL injection in Frappe HelpDesk 1.14.0 dashboard functionality allows authenticated attackers to execute arbitrary SQL queries via the get_dashboard_data endpoint. Unsafe concatenation of user-controlled parameters into dynamic SQL statements enables data exfiltration and database manipulation. Publicly available exploit code exists. With CVSS 8.6 (Network/Low Complexity/Low Privilege Required), this represents a high-severity risk for organizations running the affected version, though no active exploitation (CISA KEV) has been confirmed.
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers to modify or retrieve database contents via the per_id parameter in edit_personnel.php. Exploit code is publicly available, but no active exploitation has been confirmed.
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.
SQL injection in Jshop MiniProgram Mall System 2.9.0 via the cat_id parameter of /index.php/api.html allows low-privileged remote attackers to perform unauthorized database operations, including data extraction or modification. Public exploit code is available
Remote SQL injection in Student Management System 1.0 via the sub parameter in /newsubject.php allows unauthenticated attackers to manipulate database queries. A publicly available proof-of-concept exists, but no active exploitation has been confirmed. Exploitation probability is low (EPSS 0.04%), though the vulnerability is easily triggered over the network without authentication.
SQL injection in Student Management System 1.0 allows remote attackers to manipulate the ID parameter in /newrecord.php, potentially reading or modifying database contents. Exploit code is publicly available, though the EPSS exploitation probability is low (0.04%). No active exploitation has been reported by CISA KEV.
SQL injection in Student Management System 1.0 allows remote attackers to manipulate the 'ID' parameter in /newcurriculm.php, potentially leading to unauthorized database access. Public exploit code exists, but EPSS exploitation probability is negligible (0.04%), and no active exploitation has been reported. The affected product is a niche academic application, limiting real-world impact.
SQL injection in the admin login of Online Ordering System 1.0 allows remote, unauthenticated attackers to manipulate the Username parameter to execute unauthorized SQL commands, potentially leading to data extraction, modification, or authentication bypass. Exploit code is publicly available, but the low EPSS score (0.04%) and lack of CISA KEV listing indicate no active widespread exploitation at this time.
SQL injection in Online Ordering System 1.0 allows remote attackers to extract or modify database contents via the Name parameter in /user_contact.php. Public exploit code is available, but no evidence of active exploitation exists. EPSS is very low (0.04%), indicating minimal real-world impact.
SQL injection in Online Ordering System 1.0 allows remote attackers to inject arbitrary SQL via the product_id parameter of /user_school.php, enabling data extraction or manipulation. Exploit code is publicly available, though no active exploitation has been confirmed by CISA or threat intelligence feeds.
Unauthenticated SQL injection in Simple Shopping Cart 1.0 via the admin_username parameter on /adminlogin.php allows remote attackers to extract sensitive data or bypass authentication. A proof-of-concept exploit is publicly available, though no active exploitation has been reported in CISA KEV. The vulnerability affects code-projects/fabian's PHP-based shopping cart software.
SQL injection in Simple Shopping Cart 1.0 allows authenticated remote attackers to manipulate the item_name parameter in /Admin/additems.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation has been confirmed, and a low EPSS score (0.04%) indicates minimal immediate risk.
SQL injection in Simple Shopping Cart 1.0 allows authenticated remote attackers to manipulate database queries via the user_id parameter in /Customers/settings.php. While the CVSS 4.0 base score is only 2.1 (Low), public exploit code is available, enabling authenticated attackers to read or modify database contents. The EPSS score of 0.04% and absence from CISA KEV suggest low real-world exploitation probability, but organizations using this product should assess internal risk based on stored data sensitivity.
SQL injection in IdeaCMS up to version 1.8 permits unauthenticated remote attackers to execute arbitrary SQL commands via the params argument in Coupon.php's whereRaw function. A public exploit is available, but the EPSS exploitation probability is low (0.04%), and no active exploitation is confirmed.
SQL injection in Daily Time Recording System 4.5.0 allows remote authenticated (low‑privilege) attackers to inject arbitrary SQL via the detail_Id parameter of /admin/add_payroll.php, enabling limited data disclosure, modification, or service disruption. A public proof‑of‑concept exploit exists, though the EPSS score of 0.04% suggests very low exploitation probability and no active exploitation has been confirmed.
SQL injection in Philipinho Simple-PHP-Blog up to commit 94b5d3e allows low-privileged remote attackers to manipulate SQL queries via the /edit.php endpoint. An exploit is publicly available, but no active exploitation in the wild is reported. EPSS probability is very low (0.04%).
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to extract or modify database data by manipulating the 'fname' parameter in /edit_user.php. The exploit is publicly available, but no active exploitation has been confirmed, and the EPSS score is very low (0.04%), indicating minimal real-world likelihood.
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
SQL injection in Simple Leave Manager 1.0 allows remote attackers to manipulate the staff_id parameter in /request.php to execute arbitrary SQL commands, potentially leading to unauthorized data access, modification, or deletion. A public exploit is available but no active exploitation has been confirmed by CISA KEV.
SQL injection in Employee Profile Management System 1.0 enables authenticated remote attackers to inject arbitrary SQL via the per_id parameter in the /print_personnel_report.php endpoint. Public exploit code is available, though active exploitation is not confirmed. The flaw can lead to data leakage or manipulation.
Unsanitized ID parameter in /editotheraccount.php of code-projects Currency Exchange System 1.0 leads to SQL injection, allowing remote unauthenticated attackers to read, modify, or disrupt database contents with low confidentiality, integrity, and availability impact. Public exploit code is available; no active exploitation reported in CISA KEV. EPSS indicates a 0.04% probability of exploitation.
SQL injection in the Currency Exchange System 1.0 application allows unauthenticated remote attackers to manipulate SQL queries via the ID parameter in /edttrns.php. This can lead to unauthorized access to database contents or modification of exchange records. A publicly available proof-of-concept exploit exists, though no active exploitation has been confirmed.
SQL injection in code-projects Currency Exchange System 1.0 allows remote unauthenticated attackers to manipulate database queries by supplying a crafted `ID` parameter to `/viewserial.php`, potentially reading, modifying, or deleting backend database content. The affected product is a hobbyist PHP demo application distributed via code-projects.org; a proof-of-concept exploit has been publicly disclosed on GitHub. No patch has been released and the application appears to be a static demo artifact rather than an actively maintained codebase, making remediation unlikely outside of decommissioning.
SQL injection in Currency Exchange System 1.0 via the ID parameter in /edit.php allows remote attackers to manipulate database queries without authentication. Public exploit code exists, but EPSS probability is very low (0.04%) and no active exploitation is confirmed, indicating limited real-world targeting.
SQL injection in itsourcecode Student Information System 1.0 allows authenticated attackers to manipulate database queries via the ID parameter in the /section_edit1.php script. Proof-of-concept exploit code is publicly available, but exploitation requires low-privilege authentication and EPSS indicates very low likelihood of widespread exploitation.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject SQL via the roll_number parameter in /member_search.php. Exploit code is publicly available, but EPSS score is low (0.04%) and no active exploitation has been confirmed by CISA. Attackers may read, modify, or delete database entries depending on database user privileges.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the book_id parameter in /delete_book.php, potentially resulting in unauthorized data access or modification. No authentication is required, and public exploit code is available, as documented by VulDB and NVD.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate the user_id parameter in /delete_member.php, potentially leading to unauthorized database access or data modification. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%), and no active exploitation has been confirmed through CISA KEV.
SQL injection in Campcodes School File Management System 1.0 allows unauthenticated remote attackers to inject SQL via the stud_id parameter in /update_query.php. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%) and the CISA KEV catalog does not list it. The vulnerability has a CVSS 4.0 score of 5.5 (Medium), reflecting limited impact on confidentiality, integrity, and availability.
SQL injection in the tushar-2223 Hotel-Management-System PHP project allows remote attackers to manipulate database queries via the `ID` parameter in `/admin/invoiceprint.php`. The affected codebase is pinned to rolling-release commit bb1f3b3, with no versioned patch available. A publicly available exploit report exists on GitHub (yaklang/IRifyScanResult), though EPSS at 0.04% (13th percentile) indicates negligible real-world exploitation activity - consistent with the project's extremely limited production footprint. No confirmed active exploitation (no CISA KEV entry).
SQL injection in code-projects Question Paper Generator 1.0 allows remote authenticated attackers to manipulate the subid parameter in /selectquestionuser.php, leading to limited data disclosure, modification, or service disruption. Exploit code is publicly available, though the EPSS score of 0.04% indicates extremely low probability of widespread exploitation.
SQL injection vulnerability in code-projects Employee Profile Management System 1.0 allows remote attackers with low privileges to manipulate the per_id parameter in /view_personnel.php, potentially leading to unauthorized database access. A public proof-of-concept exploit is available, but EPSS data indicates a low exploitation probability (0.04%) and there is no evidence of active exploitation in the wild. The vulnerability has been assigned CVE-2025-14193 and affects a niche application, limiting widespread risk.
We are to generate a comprehensive analysis based on the provided data, following the strict JSON output format. Let's break down the input: - CVE: CVE-2025-14192 - Description: Vulnerability in RashminDungrani online-banking up to commit hash 2337ad552ea9d385b4e07b90e6f32d011b7c68a2. File /site/dist/auth_login.php, Username argument leads to SQL injection. Remote attack. Exploit public. Rolling releases, no version details. Vendor did not respond. - CVSS Score: 5.5 (this is likely a CVSS v4.0 base score given the vector) - CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X (this is a CVSS 4.0 vector, with E:P indicating exploit code maturity is proof-of-concept, and other supplemental metrics as X not defined) - CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')) - EPSS: 0.04% (13th percentile) - very low. - KEV: not mentioned, so not in CISA KEV. - Patch availability: The description says "Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available." Also vendor did not respond. So no clear patch version. However, the vulnerability might be fixed in some later commit? Since rolling releases, the commit hash might be the known affected one, but later commits may have fixed it silently? In remediation, we must note that no official patch version is available, but the GitHub repo might have updates. - Tags: SQLi, PHP - CPE strings: not explicitly given, but affected versions from EUVD: online-banking 2337ad552ea9d385b4e07b90e6f32d011b7c68a2. This suggests the product is a specific GitHub repository. So we can derive product name: "online-banking" by RashminDungrani. - References: a GitHub file showing exploit? The first link is a docx file "online-banking-have-sql.docx" which likely conta
SQL injection in Chanjet TPlus through version 20251121 allows remote unauthenticated attackers to manipulate the currentAccId parameter in the MultiCompanySettingController ASHX handler, leading to limited data tampering, information disclosure, and service disruption. Public exploit code is available; however, no active exploitation has been confirmed (not listed in CISA KEV), and EPSS indicates low probability of widespread attacks.
SQL injection in Chanjet CRM up to version 20251121 allows remote attackers to manipulate database queries via the gblOrgID parameter in /tools/jxf_dump_table_demo.php. Public exploit code is available, enabling practical attacks despite a low EPSS exploitation probability of 0.04%. The vendor has not responded to disclosure, leaving no official patch.
SQL injection in Yonyou U8 Cloud 5.0, 5.0sp, 5.1, and 5.1sp allows authenticated remote attackers to manipulate database queries via the usercode parameter in the AppServletService endpoint. Public exploit code is available, and the vendor has not responded to disclosure, though no active exploitation has been confirmed in the wild. The low CVSS v4.0 base score (2.1) and minimal EPSS (0.04%) indicate a currently low risk, but the ease of exploitation merits prompt attention.
Blind SQL injection in the AI Autotagger with OpenAI WordPress plugin allows authenticated attackers with Contributor-level access and AI metabox permissions to extract sensitive database information via time-based techniques. The vulnerability resides in the AI preview AJAX endpoint's 'existing_terms_orderby' parameter and affects versions up to 3.40.1. No active exploitation has been confirmed at this time, and the EPSS score indicates a very low probability of widespread exploitation.
SQL injection in PHP-Guitar-Shop allows remote, unauthenticated attackers to manipulate the ID parameter of /product.php, compromising the underlying database with low impact. All rolling-release versions up to commit 6ce0868889 are affected, and a public proof-of-concept exploit is available. Despite the network-accessible attack vector, EPSS indicates a very low probability of real-world exploitation.
Authenticated SQL injection in AMTT HiBOS 1.0 allows remote administrators to inject arbitrary SQL via the ID parameter in cardmake_down.php, leading to low-impact data manipulation. Exploit code is publicly available but requires administrative credentials, significantly limiting real-world risk. No active exploitation is reported.
The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 3.6.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.
Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can use UNION-based injection to extract sensitive information from the users table including usernames and passwords.
dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.
SQL injection in JIZHICMS up to version 2.5.5 allows remote authenticated attackers to execute arbitrary SQL commands via the batch comment deletion functionality, potentially leading to data manipulation or unauthorized access to the database. A public proof-of-concept exploit is available, and the vendor has not released a
SQL injection in JIZHICMS up to 2.5.5 allows remotely authenticated attackers with high privileges to execute arbitrary SQL commands via the 'aid' or 'tid' parameters in the comment administration interface. Successful exploitation could lead to unauthorized reading or modification of database contents. Public exploit code is available, but no active exploitation is confirmed, and EPSS predicts very low exploitation probability.
## Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API
The Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function in all versions up to, and including, 3.40.1. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database granted they have metabox access for the taxonomy (enabled by default for contributors).
The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.