#Database
All CosmicBytez Labs articles tagged #Database, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-78143: SQL Injection in Barangay Resident Profiling Management System
High-severity SQL injection in Barangay Resident Profiling System 1.0 lets remote attackers extract personal data via the residents.php Search parameter.
- Security
Critical SQL Injection in Maps Marker Pro WordPress Plugin (CVE-2026-73183)
An unauthenticated SQL injection flaw (CVSS 9.3) in Maps Marker Pro <= 4.32 exposes WordPress databases to full read and write access.
- Security
CVE-2026-19425: Critical SQL Injection in Travel Agency Management System
A critical unauthenticated SQL injection vulnerability in Win Men International's Travel Agency Management System allows remote attackers to read, modify,...
- Security
CVE-2026-14641: Remote SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to dump the...
- Security
CVE-2026-14642: Remote SQL Injection in SourceCodester Timetabling System edit_class2.php
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to fully...
- Security
CVE-2026-54350: Budibase Unauthenticated Database Read & Write (CVSS 10.0)
A critical CVSS 10.0 flaw in Budibase allows unauthenticated visitors of any published app to read every document in backing database collections and...
- Security
CVE-2026-11334: SQL Injection in College Management System
A high-severity SQL injection vulnerability (CVSS 7.3) in CollegeManagementSystem allows attackers to manipulate the department_code parameter in…
- Security
CVE-2018-25362: Twitter-Clone SQL Injection via follow.php
Twitter-Clone 1 contains a high-severity SQL injection vulnerability in follow.php that allows attackers to extract sensitive database information through.
- Security
CVE-2026-8053: MongoDB Time-Series Out-of-Bounds Write
An authenticated user with database write privileges can trigger an out-of-bounds memory write in the mongod process via a flaw in MongoDB Server's...
- Security
CVE-2024-46636: NASA EOSDIS MODAPS v8.1 SQL Injection
A critical SQL injection vulnerability in NASA's Earth Observing System Data and Information System MODAPS v8.1 allows unauthenticated attackers to...
- Security
CVE-2026-41478: Saltcorn SQL Injection Allows Full Database
A critical SQL injection vulnerability in Saltcorn's mobile-sync routes allows any authenticated low-privilege user with read access to a single table to...
- Security
Juju Dqlite Cluster TLS Auth Bypass — Unauthenticated
A CVSS 10.0 critical vulnerability in Juju versions 3.2.0–3.6.18 and 4.0–4.0.3 allows unauthenticated attackers to connect directly to the internal Dqlite...