Advisories · Weakness

SQL injection.

Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-14796 CVE record

CVSS 5.3 Medium

CodeAstro Apartment Visitor Management System report.php sql injection
- CodeAstro Apartment Visitor Management System
- Other injection
- SQL injection
Not analysed yet 6 Jul 2026
CVE-2026-14795 CVE record

CVSS 5.3 Medium

CodeAstro Apartment Visitor Management System action-visitor.php sql injection
- CodeAstro Apartment Visitor Management System
- Other injection
- SQL injection
Not analysed yet 6 Jul 2026
CVE-2026-14774 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System paymentdischarge.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14773 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System payment.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14772 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_course1.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14771 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_exam1.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14770 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_room.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14769 CVE record

CVSS 6.9 Medium

code-projects Real State Services pay.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14768 CVE record

CVSS 6.9 Medium

code-projects Real State Services builderHome.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14767 CVE record

CVSS 5.3 Medium

CodeAstro Ecommerce Website POST Parameter confirm.php sql injection
- CodeAstro Ecommerce Website
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14766 CVE record

CVSS 5.3 Medium

CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection
- CodeAstro Apartment Visitor Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14764 CVE record

CVSS 6.9 Medium

code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection
- code-projects Hotel and Tourism Reservation
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14763 CVE record

CVSS 6.9 Medium

code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection
- code-projects Hotel and Tourism Reservation
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14762 CVE record

CVSS 6.9 Medium

code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection
- code-projects Hotel and Tourism Reservation
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14756 CVE record

CVSS 6.9 Medium

code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection
- code-projects Hotel and Tourism Reservation
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14755 CVE record

CVSS 6.9 Medium

code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection
- code-projects Hotel and Tourism Reservation
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14754 CVE record

CVSS 6.9 Medium

code-projects Hotel and Tourism Reservation add_room.php sql injection
- code-projects Hotel and Tourism Reservation
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14751 CVE record

CVSS 5.3 Medium

mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injection
- mjperpinosa stumasy
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14750 CVE record

CVSS 6.9 Medium

mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injection
- mjperpinosa stumasy
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14747 CVE record

CVSS 6.9 Medium

code-projects Real State Services addprojectsale.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14746 CVE record

CVSS 6.9 Medium

code-projects Real State Services addprojectrent.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14745 CVE record

CVSS 6.9 Medium

code-projects Real State Services single-list_rent.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14744 CVE record

CVSS 6.9 Medium

code-projects Real State Services normalHomeRent.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14743 CVE record

CVSS 6.9 Medium

code-projects Real State Services normalHomeSale.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14737 CVE record

CVSS 6.9 Medium

Hanwang e-Face General Management Platform querySysAuthStr.do sql injection
- Hanwang e-Face General Management Platform
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14735 CVE record

CVSS 6.9 Medium

code-projects Smart Parking System parkings.php sql injection
- code-projects Smart Parking System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14734 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_product.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14733 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14732 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_exam.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14731 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System patientreport.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14730 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System patientprofile.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14717 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System patientlogin.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14713 CVE record

CVSS 6.9 Medium

SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injection
- SourceCodester Pizzafy E-Commerce System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14706 CVE record

CVSS 5.3 Medium

code-projects Online Examination Quiz Creation Feature update.php sql injection
- code-projects Online Examination
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14705 CVE record

CVSS 6.9 Medium

code-projects Online Examination head.php sql injection
- code-projects Online Examination
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14703 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System patientorder.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14701 CVE record

CVSS 5.3 Medium

code-projects Internship Management System Password Change Endpoint change_password.php sql injection
- code-projects Internship Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14700 CVE record

CVSS 6.9 Medium

code-projects Internship Management System Employer Login Endpoint login.php sql injection
- code-projects Internship Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14695 CVE record

CVSS 6.9 Medium

SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection
- SourceCodester Multi-Vendor Online Grocery Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14694 CVE record

CVSS 5.3 Medium

SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection
- SourceCodester Multi-Vendor Online Grocery Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14692 CVE record

CVSS 5.3 Medium

SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection
- SourceCodester Multi-Vendor Online Grocery Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14689 CVE record

CVSS 5.3 Medium

CodeAstro Apartment Visitor Management System add-apartment.php sql injection
- CodeAstro Apartment Visitor Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14688 CVE record

CVSS 6.9 Medium

itsourcecode Online Hotel Management System login.php sql injection
- itsourcecode Online Hotel Management System
- Other injection
- SQL injection
Not analysed yet 5 Jul 2026
CVE-2026-14660 CVE record

CVSS 6.9 Medium

code-projects Online Job Portal login.php sql injection
- code-projects Online Job Portal
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14659 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System patientappointment.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14658 CVE record

CVSS 5.3 Medium

code-projects Assessment Management marking-scheme.php sql injection
- code-projects Assessment Management
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14657 CVE record

CVSS 5.3 Medium

code-projects Assessment Management Database Query marking-scheme.php sql injection
- code-projects Assessment Management
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14654 CVE record

CVSS 6.9 Medium

SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection
- SourceCodester Simple and Nice Shopping Cart Script
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14653 CVE record

CVSS 6.9 Medium

SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection
- SourceCodester Simple and Nice Shopping Cart Script
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14652 CVE record

CVSS 6.9 Medium

SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection
- SourceCodester Simple and Nice Shopping Cart Script
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14649 CVE record

CVSS 6.9 Medium

code-projects Online Voting System saveVote.php test_input sql injection
- code-projects Online Voting System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14648 CVE record

CVSS 6.9 Medium

code-projects Online Voting System Login authentication.php test_input sql injection
- code-projects Online Voting System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14642 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_class2.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14641 CVE record

CVSS 6.9 Medium

SourceCodester Class and Exam Timetabling System edit_course.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14640 CVE record

CVSS 6.9 Medium

CodeAstro Apartment Visitor Management System Login index.php sql injection
- CodeAstro Apartment Visitor Management System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14639 CVE record

CVSS 5.3 Medium

CodeAstro Ecommerce Website my_account.php sql injection
- CodeAstro Ecommerce Website
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14638 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System patient.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-14619 CVE record

CVSS 5.3 Medium

itsourcecode Hospital Management System medicine.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
Not analysed yet 4 Jul 2026
CVE-2026-4321 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQLi in Raera's Destekz
- Raera - Ankara Web Design and Digital Advertising Agency Destekz
- SQL injection
Not analysed yet 3 Jul 2026
CVE-2026-12920 CVE record

CVSS 4.9 Medium

Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- SQL injection
Not analysed yet 3 Jul 2026