CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Freelance Website Script version 2.0.6 has a SQL Injection vulnerability via the pr_id parameter in jobdetails.php or the catid parameter in searchbycat_list.php.
Hot Scripts Clone version 3.1 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.
Doctor Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
E-commerce MLM Software version 1.0 is vulnerable to SQL Injection via the pid parameter in service_detail.php, eventid parameter in event_detail.php, or newid parameter in news_detail.php.
Chartered Accountant Booking Script version 1.0 has an SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Child Care Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
CMS Auditor Website version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /news-detail path.
Co-work Space Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Consumer Complaints Clone Script 1.0 has a SQL Injection vulnerability via the id parameter in the other-user-profile.php file.
Entrepreneur Bus Booking Script version 3.0.4 has an SQL Injection vulnerability via the sourcebus parameter in the booker_details.php file.
The Advanced Real Estate Script version 4.0.7 has a SQL Injection vulnerability via the projectmain, proj_type, searchtext, sell_price, or maxprice parameters in the search-results.php file.
Advance B2B Script version 2.1.3 is vulnerable to SQL Injection via the show_id parameter in tradeshow-list-detail.php and the pid parameter in view-product.php.
Cab Booking Script version 1.0 has a SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Basic B2B Script version 2.0.8 has a SQL Injection vulnerability via the id parameter in the product_details.php file.
Advance Online Learning Management Script version 3.1 has a SQL Injection vulnerability via the subcatid or popcourseid parameter in courselist.php.
Affiliate MLM Script version 1.0 has a SQL Injection vulnerability via the key parameter in product-category.php.
Nearbuy Clone Script version 3.2 has a SQL Injection vulnerability via the category_list.php search parameter.
Entrepreneur Job Portal Script version 2.0.6 has an SQL Injection vulnerability via the rid1 parameter in the jobsearch_all.php file.
Beauty Parlour Booking Script version 1.0 has an SQL Injection vulnerability via the /list gender or city parameter.
DomainSale PHP Script version 1.0 has a SQL Injection vulnerability via the id parameter in domain.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

