CVE-2026-48240

Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_id and f_tick_id POST parameters are concatenated into WHERE clauses of SELECT statements in the statistics rollup queries without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48239

Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/reports.php where the tick_id POST parameter is concatenated into the WHERE clause of SELECT statements in the incidents summary report without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48238

Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/mobile_main.php where the id GET parameter is concatenated into the WHERE clause of a SELECT statement used as a ticket-existence sanity check without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48237

Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in message.php where the frm_ticket_id and frm_resp_id POST parameters are concatenated into WHERE clauses of SELECT/UPDATE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48236

Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticketspassword) are concatenated into mysqli connection arguments and dynamic SQL operating against an attacker-controlled database without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48235

Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, longitude, callsign, mph, altitude, and timestamp values parsed from external GPS tracking service XML/JSON responses (InstaMapper and Google Latitude integration) are concatenated into UPDATE and INSERT statements without sanitization. An attacker able to compromise or impersonate the remote GPS tracker endpoint can inject SQL to manipulate the responder location, tracks, and assignment tables.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48234

Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in portal/ajax/list_requests.php where the sort and dir GET parameters are concatenated into the ORDER BY clause of a SELECT statement without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48233

Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/sit_incidents.php where the offset GET parameter is concatenated into the LIMIT clause of a SELECT statement without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48232

Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/fullsit_incidents.php where the offset GET parameter is concatenated into the LIMIT clause of a SELECT statement without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2026-48231

Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in tables.php where the multiple POST parameters (tablename, indexname, sortby) are concatenated into table/column identifiers in dynamically constructed SELECT/UPDATE/DELETE statements without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Openises Tickets Project

Products

Tickets Tickets

CVE-2025-34112

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user account in the appliance database. This user can then trigger a command injection vulnerability in the '/index.php?page=licenses' endpoint to execute arbitrary commands. The attacker may escalate privileges to root by exploiting an insecure sudoers configuration that allows the 'mazu' user to execute arbitrary commands as root via SSH key extraction and command chaining. Successful exploitation allows full remote root access to the virtual appliance.

CVSS 4.0 · 10 Critical EPSS 2.8% KEV · Not listed

Vendors

Riverbed

Products

Steelcentral Aternity Agent

CVE-2021-47956

EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname

EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers can send POST requests to insert.php with malicious firstname values to extract sensitive database information.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Egavilanmedia

Products

Egavilanmedia Phpcrud Phpcrud

CVE-2021-47782

Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection

Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries. Attackers can exploit the vulnerability by sending crafted payloads to the /rass/api/v1/trafficCycle/ endpoint to manipulate PostgreSQL database queries and potentially extract sensitive information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Odinesolutions Openpolicyagent

Products

Gatekeeper Gatekeeper

CVE-2020-37244

WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract sensitive database information using time-based blind or UNION-based SQL injection techniques.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Ithemes Supsystic Wordpress

Products

Membership Membership Wordpress

CVE-2020-37141

AMSS++ v 4.31 - 'id' SQL Injection

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Amss++ Project Amss\+\+ Project Amssplus

Products

Amss++ Amss\+\+ Amss Plus

CVE-2019-25745

WordPress Plugin Google Review Slider 6.1 SQL Injection via tid

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'tid' parameter. Attackers can send GET requests to the admin interface with malicious 'tid' values to extract sensitive database information using time-based blind SQL injection techniques.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

10web Jgwhite33 Wordpress

Products

Slider Wp Google Review Slider Wordpress

CVE-2019-25713

MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter

MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charge[group_total] parameter. Attackers can submit crafted POST requests to the /charge/admin endpoint with error-based, time-based blind, or stacked query payloads to extract sensitive database information or manipulate data.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Manageyourteam Myt Myt Project

Products

Myt Project Management Project Management Myt

CVE-2019-25501

Simple Job Script SQL Injection via delete_application_ajax.php

Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter. Attackers can send POST requests to delete_application_ajax.php with crafted payloads to extract sensitive data, bypass authentication, or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25500

Simple Job Script SQL Injection via register-recruiters endpoint

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter. Attackers can send POST requests to the register-recruiters endpoint with time-based SQL injection payloads to extract sensitive data or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25499

Simple Job Script SQL Injection via get_job_applications_ajax.php

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter. Attackers can send POST requests to get_job_applications_ajax.php with malicious job_id values to bypass authentication, extract sensitive data, or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript