CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Advanced World Database version 2.0.5 has an SQL Injection vulnerability via the country or state parameter in city.php and the country parameter in state.php.
Muslim Matrimonial Script version 3.02 has an SQL Injection vulnerability via the succid parameter in the success-story.php file.
Groupon Clone Script version 3.01 has a SQL Injection vulnerability via the state_id parameter in the city_ajax.php file.
Car Rental Script version 2.0.4 has an SQL Injection vulnerability via the val parameter in the countrycode1.php file.
MLM Forced Matrix version 2.0.9 has a SQL Injection vulnerability via the newid parameter in the news-detail.php file.
MLM Forex Market Plan Script version 2.0.4 is vulnerable to SQL Injection via the newid parameter in news_detail.php and the eventid parameter in event_detail.php.
The Single Theater Booking Script version 3.2.1 has a SQL Injection vulnerability via the q parameter in the findcity.php file.
Multiplex Movie Theater Booking Script version 3.1.5 has an SQL Injection vulnerability via the moid parameter in trailer-detail.php, moid parameter in show-time.php, or eid parameter in event-detail.php.
The Responsive Events Movie Ticket Booking Script version 3.2.1 has an SQL Injection vulnerability via the q parameter in the findcity.php file.
Version 4.7.2 of Multireligion Responsive Matrimonial has an SQL Injection vulnerability via the succid parameter in the success-story.php file.
Yoga Class Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Secure E-commerce Script version 2.0.1 is vulnerable to SQL Injection via the searchmain or searchcat parameters in category.php and the sid parameter in single_detail.php.
Responsive Realestate Script version 3.2 has a SQL Injection vulnerability via the tbud parameter in property-list.
Readymade Video Sharing Script version 3.2 has an SQL Injection vulnerability via the report_videos array parameter in single-video-detail.php.
Readymade PHP Classified Script version 3.3 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.
Professional Service Script version 1.0 has a SQL Injection vulnerability via the city parameter in the service list.
PHP Multivendor Ecommerce version 1.0 has an SQL Injection vulnerability via the sid parameter in single_detail.php and the searchcat or chid1 parameters in category.php.
Opensource Classified Ads Script version 3.2 has a SQL Injection vulnerability via the keyword parameter in advance_result.php.
The Online Exam Test Application Script version 1.6 has a SQL Injection vulnerability via the sort parameter in the exams.php file.
Multivendor Penny Auction Clone Script version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /detail URI.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

