# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [itsourcecode Courier Management System edit_user.php sql injection](https://agentprime.io/advisories/CVE-2026-7612.md) `CVE-2026-7612` · CVE record: itsourcecode Courier Management System · CVSS 5.1 Medium · Not analysed yet · Published 2 May 2026 · Tags: Other injection, SQL injection - [nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py \_format_plugins code injection](https://agentprime.io/advisories/CVE-2026-7595.md) `CVE-2026-7595` · CVE record: nextlevelbuilder ui-ux-pro-max-skill · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, Code injection - [itsourcecode Courier Management System edit_staff.php sql injection](https://agentprime.io/advisories/CVE-2026-7592.md) `CVE-2026-7592` · CVE record: itsourcecode Courier Management System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [TimBroddin astro-mcp-server MCP Tool Query Construction index.ts sql injection](https://agentprime.io/advisories/CVE-2026-7591.md) `CVE-2026-7591` · CVE record: TimBroddin astro-mcp-server · CVSS 5.3 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [Exiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection](https://agentprime.io/advisories/CVE-2026-7580.md) `CVE-2026-7580` · CVE record: Exiftool · CVSS 4.8 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, Code injection - [itsourcecode Electronic Judging System login.php sql injection](https://agentprime.io/advisories/CVE-2026-7555.md) `CVE-2026-7555` · CVE record: itsourcecode Electronic Judging System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [code-projects Gym Management System edit_exercises.php sql injection](https://agentprime.io/advisories/CVE-2026-7553.md) `CVE-2026-7553` · CVE record: code-projects Gym Management System · CVSS 5.1 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection](https://agentprime.io/advisories/CVE-2026-7550.md) `CVE-2026-7550` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection](https://agentprime.io/advisories/CVE-2026-7549.md) `CVE-2026-7549` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [Totolink NR1800X cstecgi.cgi sub_41A68C command injection](https://agentprime.io/advisories/CVE-2026-7548.md) `CVE-2026-7548` · CVE record: Totolink NR1800X · CVSS 8.7 High · Not analysed yet · Published 1 May 2026 · Tags: Other injection, Command injection - [SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection](https://agentprime.io/advisories/CVE-2026-7545.md) `CVE-2026-7545` · CVE record: SourceCodester Advanced School Management System · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Other injection, SQL injection - [Bootstrap CMS Page Creation show.blade.php code injection](https://agentprime.io/advisories/CVE-2026-7508.md) `CVE-2026-7508` · CVE record: Bootstrap CMS · CVSS 5.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Other injection, Code injection - [SourceCodester Hotel Management System check sql injection](https://agentprime.io/advisories/CVE-2026-7506.md) `CVE-2026-7506` · CVE record: SourceCodester Hotel Management System · CVSS 6.9 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Other injection, SQL injection - [Tenda 4G300 DelFil sub_425A28 command injection](https://agentprime.io/advisories/CVE-2026-7469.md) `CVE-2026-7469` · CVE record: Tenda 4G300 · CVSS 5.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Other injection, Command injection - [SourceCodester Pet Grooming Management Software update_customer.php sql injection](https://agentprime.io/advisories/CVE-2026-7447.md) `CVE-2026-7447` · CVE record: SourceCodester Pet Grooming Management Software · CVSS 5.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection](https://agentprime.io/advisories/CVE-2026-7410.md) `CVE-2026-7410` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection](https://agentprime.io/advisories/CVE-2026-7409.md) `CVE-2026-7409` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection](https://agentprime.io/advisories/CVE-2026-7408.md) `CVE-2026-7408` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection](https://agentprime.io/advisories/CVE-2026-7407.md) `CVE-2026-7407` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection](https://agentprime.io/advisories/CVE-2026-7394.md) `CVE-2026-7394` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection](https://agentprime.io/advisories/CVE-2026-7392.md) `CVE-2026-7392` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection](https://agentprime.io/advisories/CVE-2026-7391.md) `CVE-2026-7391` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [EyouCMS common.php GetSortData sql injection](https://agentprime.io/advisories/CVE-2026-7389.md) `CVE-2026-7389` · CVE record: EyouCMS · CVSS 6.9 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, SQL injection - [EyouCMS Template File FilemanagerLogic.php editFile code injection](https://agentprime.io/advisories/CVE-2026-7388.md) `CVE-2026-7388` · CVE record: EyouCMS · CVSS 5.1 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection, Code injection - [Authorization Bypass in TUBITAK BILGEM's Pardus Update](https://agentprime.io/advisories/CVE-2026-5140.md) `CVE-2026-5140` · CVE record: TUBITAK BILGEM Software Technologies Research Institute Pardus Update · CVSS 8.8 High · Not analysed yet · Published 29 Apr 2026 · Tags: Other injection - [eiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection](https://agentprime.io/advisories/CVE-2026-7316.md) `CVE-2026-7316` · CVE record: eiliyaabedini aider-mcp · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, Command injection - [SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection](https://agentprime.io/advisories/CVE-2026-7293.md) `CVE-2026-7293` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.1 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection](https://agentprime.io/advisories/CVE-2026-7290.md) `CVE-2026-7290` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection](https://agentprime.io/advisories/CVE-2026-7283.md) `CVE-2026-7283` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection](https://agentprime.io/advisories/CVE-2026-7282.md) `CVE-2026-7282` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection](https://agentprime.io/advisories/CVE-2026-7268.md) `CVE-2026-7268` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System view_prod.php sql injection](https://agentprime.io/advisories/CVE-2026-7267.md) `CVE-2026-7267` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection](https://agentprime.io/advisories/CVE-2026-7266.md) `CVE-2026-7266` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System index.php category sql injection](https://agentprime.io/advisories/CVE-2026-7265.md) `CVE-2026-7265` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection](https://agentprime.io/advisories/CVE-2026-7264.md) `CVE-2026-7264` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [code-projects Coaching Management System POST reply.php sql injection](https://agentprime.io/advisories/CVE-2026-7229.md) `CVE-2026-7229` · CVE record: code-projects Coaching Management System · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection](https://agentprime.io/advisories/CVE-2026-7228.md) `CVE-2026-7228` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php login sql injection](https://agentprime.io/advisories/CVE-2026-7227.md) `CVE-2026-7227` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection](https://agentprime.io/advisories/CVE-2026-7226.md) `CVE-2026-7226` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection](https://agentprime.io/advisories/CVE-2026-7225.md) `CVE-2026-7225` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection](https://agentprime.io/advisories/CVE-2026-7224.md) `CVE-2026-7224` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [sqlite-mcp has an Injection issue](https://agentprime.io/advisories/GHSA-4j28-22qp-rjcf.md) `GHSA-4j28-22qp-rjcf`, `CVE-2026-7206`, `PYSEC-2026-3074` · PyPI `sqlite-mcp`: affected `<=0.1.0`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, SQL injection - [egtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injection](https://agentprime.io/advisories/CVE-2026-7215.md) `CVE-2026-7215` · CVE record: egtai gmx-vmd-mcp · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, Command injection - [dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection](https://agentprime.io/advisories/CVE-2026-7211.md) `CVE-2026-7211` · CVE record: dvladimirov MCP · CVSS 6.9 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Other injection, Command injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7199.md) `CVE-2026-7199` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [CodeAstro Online Classroom guestdetails sql injection](https://agentprime.io/advisories/CVE-2026-7196.md) `CVE-2026-7196` · CVE record: CodeAstro Online Classroom · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7194.md) `CVE-2026-7194` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [Tenda HG3 formTracert command injection](https://agentprime.io/advisories/CVE-2026-7160.md) `CVE-2026-7160` · CVE record: Tenda HG3 · CVSS 8.7 High · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, Command injection - [disler aider-mcp-server aider_ai_code server.py command injection](https://agentprime.io/advisories/CVE-2026-7157.md) `CVE-2026-7157` · CVE record: disler aider-mcp-server · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, Command injection - [CodeAstro Online Classroom addnewfaculty sql injection](https://agentprime.io/advisories/CVE-2026-7148.md) `CVE-2026-7148` · CVE record: CodeAstro Online Classroom · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [1000 Projects Portfolio Management System MCA block_status.php sql injection](https://agentprime.io/advisories/CVE-2026-7143.md) `CVE-2026-7143` · CVE record: 1000 Projects Portfolio Management System MCA · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [code-projects Online Lot Reservation System loginuser.php sql injection](https://agentprime.io/advisories/CVE-2026-7131.md) `CVE-2026-7131` · CVE record: code-projects Online Lot Reservation System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7130.md) `CVE-2026-7130` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7128.md) `CVE-2026-7128` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7127.md) `CVE-2026-7127` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-7126.md) `CVE-2026-7126` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 6.9 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [code-projects Employee Management System cancel.php sql injection](https://agentprime.io/advisories/CVE-2026-7118.md) `CVE-2026-7118` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [code-projects Employee Management System approve.php sql injection](https://agentprime.io/advisories/CVE-2026-7117.md) `CVE-2026-7117` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [code-projects Employee Management System delete.php sql injection](https://agentprime.io/advisories/CVE-2026-7115.md) `CVE-2026-7115` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection - [code-projects Employee Management System edit.php sql injection](https://agentprime.io/advisories/CVE-2026-7114.md) `CVE-2026-7114` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Other injection, SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .