# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [SourceCodester Class and Exam Timetabling System index1.php sql injection](https://agentprime.io/advisories/CVE-2026-11472.md) `CVE-2026-11472` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System index2.php sql injection](https://agentprime.io/advisories/CVE-2026-11471.md) `CVE-2026-11471` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Other injection, SQL injection - [erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection](https://agentprime.io/advisories/CVE-2026-11457.md) `CVE-2026-11457` · CVE record: erzhongxmu JeeWMS · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, CWE-707 - [Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection](https://agentprime.io/advisories/CVE-2026-11456.md) `CVE-2026-11456` · CVE record: Chanjet CRM · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, SQL injection - [FoundationAgents MetaGPT common.py check_cmd_exists command injection](https://agentprime.io/advisories/CVE-2026-11455.md) `CVE-2026-11455` · CVE record: FoundationAgents MetaGPT · CVSS 2.3 Low · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection](https://agentprime.io/advisories/CVE-2026-11453.md) `CVE-2026-11453` · CVE record: Tiobon Employee Self-Service System · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, SQL injection - [GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection](https://agentprime.io/advisories/CVE-2026-11452.md) `CVE-2026-11452` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection](https://agentprime.io/advisories/CVE-2026-11451.md) `CVE-2026-11451` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Path Normalization dlopen command injection](https://agentprime.io/advisories/CVE-2026-11450.md) `CVE-2026-11450` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection](https://agentprime.io/advisories/CVE-2026-11449.md) `CVE-2026-11449` · CVE record: GL.iNet GL-MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection](https://agentprime.io/advisories/CVE-2026-11448.md) `CVE-2026-11448` · CVE record: GL.iNet GL-MT3000 · CVSS 5.1 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection](https://agentprime.io/advisories/CVE-2026-11447.md) `CVE-2026-11447` · CVE record: GL.iNet GL-MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection - [Jinher OA nextselectplan.aspx sql injection](https://agentprime.io/advisories/CVE-2026-11435.md) `CVE-2026-11435` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Other injection, SQL injection - [Jinher OA GetFormSn.aspx sql injection](https://agentprime.io/advisories/CVE-2026-11412.md) `CVE-2026-11412` · CVE record: Jinher OA · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Other injection, SQL injection - [GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection](https://agentprime.io/advisories/CVE-2026-11406.md) `CVE-2026-11406` · CVE record: GL.iNet MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Other injection, Command injection - [Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action](https://agentprime.io/advisories/CVE-2026-9016.md) `CVE-2026-9016` · CVE record: qriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Other injection - [code-projects Hotel and Tourism Reservation System details.php sql injection](https://agentprime.io/advisories/CVE-2026-11342.md) `CVE-2026-11342` · CVE record: code-projects Hotel and Tourism Reservation System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, SQL injection - [D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection](https://agentprime.io/advisories/CVE-2026-11339.md) `CVE-2026-11339` · CVE record: D-Link DWR-M920 · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, Command injection - [DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags](https://agentprime.io/advisories/CVE-2026-11362.md) `CVE-2026-11362` · CVE record: BINARY DataDog::DogStatsd · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, CWE-150 - [DataDog::DogStatsd versions through 0.07 for Perl allow metric injections](https://agentprime.io/advisories/CVE-2026-9270.md) `CVE-2026-9270` · CVE record: BINARY DataDog::DogStatsd · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, CWE-150 - [tittuvarghese CollegeManagementSystem fetch.php sql injection](https://agentprime.io/advisories/CVE-2026-11334.md) `CVE-2026-11334` · CVE record: tittuvarghese CollegeManagementSystem · CVSS 6.9 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, SQL injection - [D-Link DWR-M920 formSmsManage sub_41C8E8 command injection](https://agentprime.io/advisories/CVE-2026-10878.md) `CVE-2026-10878` · CVE record: D-Link DWR-M920 · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Other injection, Command injection - [SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection](https://agentprime.io/advisories/CVE-2026-10877.md) `CVE-2026-10877` · CVE record: SourceCodester Ship Ferry Ticket Reservation System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, SQL injection - [XML injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-11169.md) `CVE-2026-11169` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection - [projectworlds Online Art Gallery Shop Project adminHome.ph sql injection](https://agentprime.io/advisories/CVE-2026-10875.md) `CVE-2026-10875` · CVE record: projectworlds Online Art Gallery Shop Project · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, SQL injection - [projectworlds Online Art Gallery Shop Project adminHome.php sql injection](https://agentprime.io/advisories/CVE-2026-10874.md) `CVE-2026-10874` · CVE record: projectworlds Online Art Gallery Shop Project · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, SQL injection - [Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-47644.md) `CVE-2026-47644` · CVE record: Microsoft Copilot Chat (Microsoft Edge) · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection - [Spree: CSV Formula Injection in Customer Export](https://agentprime.io/advisories/GHSA-xf4v-w5x5-pv79.md) `GHSA-xf4v-w5x5-pv79` · RubyGems `spree`: affected `>=5.2.0, <5.2.8 || >=5.3.0, <5.3.6 || >=5.4.0, <5.4.3`, fixed in `5.2.8`, `5.3.6`, `5.4.3` · CVSS 4.0, no score published · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection - [Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection](https://agentprime.io/advisories/GHSA-3hrh-pfw6-9m5x.md) `GHSA-3hrh-pfw6-9m5x`, `CVE-2026-47675` · npm `hono`: affected `<4.12.21`, fixed in `4.12.21` · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, CWE-1287 - [CRLF injection in freedesktop libinput](https://agentprime.io/advisories/CVE-2026-50292.md) `CVE-2026-50292` · CVE record: freedesktop libinput · CVSS 7.4 High · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection - [Etsy::StatsD versions through 1.002002 for Perl allow metric injections](https://agentprime.io/advisories/CVE-2026-46741.md) `CVE-2026-46741` · CVE record: SANBEG Etsy::StatsD · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, CWE-150 - [Net::Statsd versions before 0.13 for Perl allow metric injections](https://agentprime.io/advisories/CVE-2026-46739.md) `CVE-2026-46739` · CVE record: COSIMO Net::Statsd · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, CWE-150 - [itsourcecode Fees Management System receipt.php sql injection](https://agentprime.io/advisories/CVE-2026-10811.md) `CVE-2026-10811` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Fees Management System manage_user.php sql injection](https://agentprime.io/advisories/CVE-2026-10809.md) `CVE-2026-10809` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Fees Management System manage_student.php sql injection](https://agentprime.io/advisories/CVE-2026-10808.md) `CVE-2026-10808` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection, SQL injection - [HCL iControl was affected by Export CSV - CSV Injection vulnerability.](https://agentprime.io/advisories/CVE-2025-52612.md) `CVE-2025-52612` · CVE record: HCL iControl · CVSS 7.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: Other injection - [Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections](https://agentprime.io/advisories/CVE-2026-8722.md) `CVE-2026-8722` · CVE record: TEAM Net::Async::Statsd::Client · CVSS 6.5 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Other injection, CWE-150 - [Froxlor: BIND Zone File Injection via TXT Record Content](https://agentprime.io/advisories/GHSA-37m5-m4q3-fc6x.md) `GHSA-37m5-m4q3-fc6x`, `CVE-2026-41234`, `PKSA-jryy-96vk-jczz` · Packagist `froxlor/froxlor`: affected `<2.3.7`, fixed in `2.3.7` · CVSS 7.6 High · Not analysed yet · Published 3 Jun 2026 · Tags: Other injection - [HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens](https://agentprime.io/advisories/CVE-2026-10729.md) `CVE-2026-10729` · CVE record: Thinkst Applied Research Canarytokens · CVSS 1.2 Low · Not analysed yet · Published 3 Jun 2026 · Tags: Other injection - [SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection](https://agentprime.io/advisories/CVE-2026-10704.md) `CVE-2026-10704` · CVE record: SourceCodester Pizzafy E-Commerce System · CVSS 6.9 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Other injection, SQL injection - [ahujasid blender-mcp server.py execute_blender_code code injection](https://agentprime.io/advisories/CVE-2026-10688.md) `CVE-2026-10688` · CVE record: ahujasid blender-mcp · CVSS 5.1 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, Code injection - [ahujasid blender-mcp server.py open injection](https://agentprime.io/advisories/CVE-2026-10661.md) `CVE-2026-10661` · CVE record: ahujasid blender-mcp · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, CWE-707 - [code-projects Student Admission System index.php sql injection](https://agentprime.io/advisories/CVE-2026-10620.md) `CVE-2026-10620` · CVE record: code-projects Student Admission System · CVSS 6.9 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, SQL injection - [CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection](https://agentprime.io/advisories/GHSA-q7jx-v53g-848w.md) `GHSA-q7jx-v53g-848w`, `CVE-2026-48596`, `EEF-CVE-2026-48596` · Hex `tesla`: affected `>=0.8.0, <1.18.3`, fixed in `1.18.3` · CVSS 2.1 Low · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection - [DedeCMS carbuyaction.php RemoveXSS sql injection](https://agentprime.io/advisories/CVE-2026-10608.md) `CVE-2026-10608` · CVE record: DedeCMS · CVSS 6.9 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, SQL injection - [DedeCMS flink.php dede_htmlspecialchars sql injection](https://agentprime.io/advisories/CVE-2026-10607.md) `CVE-2026-10607` · CVE record: DedeCMS · CVSS 6.9 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, SQL injection - [DedeCMS Feedback feedback.php TrimMsg sql injection](https://agentprime.io/advisories/CVE-2026-10606.md) `CVE-2026-10606` · CVE record: DedeCMS · CVSS 6.9 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, SQL injection - [CRLF injection in HTTP/1 request line via unvalidated method in Mint](https://agentprime.io/advisories/GHSA-2pg6-44cx-c49v.md) `GHSA-2pg6-44cx-c49v`, `CVE-2026-48861`, `EEF-CVE-2026-48861` · Hex `mint`: affected `>=0.1.0, <1.9.0`, fixed in `1.9.0` · CVSS 2.1 Low · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection - [Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks](https://agentprime.io/advisories/CVE-2026-8993.md) `CVE-2026-8993` · CVE record: Ditec a.s. D.Launcher 2 · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, Information disclosure, CWE-1395 - [itsourcecode Fees Management System manage_payment.php sql injection](https://agentprime.io/advisories/CVE-2026-10568.md) `CVE-2026-10568` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, SQL injection - [elunez eladmin Application Deployment App.java command injection](https://agentprime.io/advisories/CVE-2026-10550.md) `CVE-2026-10550` · CVE record: elunez eladmin · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection, Command injection - [transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.](https://agentprime.io/advisories/CVE-2026-38978.md) `CVE-2026-38978` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection - [CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.](https://agentprime.io/advisories/CVE-2026-38967.md) `CVE-2026-38967` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2026 · Tags: Other injection - [itsourcecode Fees Management System manage_fee.php sql injection](https://agentprime.io/advisories/CVE-2026-10302.md) `CVE-2026-10302` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Fees Management System manage_course.php sql injection](https://agentprime.io/advisories/CVE-2026-10297.md) `CVE-2026-10297` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Fees Management System ajax.php sql injection](https://agentprime.io/advisories/CVE-2026-10296.md) `CVE-2026-10296` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection](https://agentprime.io/advisories/CVE-2026-10290.md) `CVE-2026-10290` · CVE record: code-projects Hotel and Tourism Reservation System · CVSS 6.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, SQL injection - [CodeAstro Payroll System home_employee.php sql injection](https://agentprime.io/advisories/CVE-2026-10286.md) `CVE-2026-10286` · CVE record: CodeAstro Payroll System · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, SQL injection - [IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator](https://agentprime.io/advisories/CVE-2026-7770.md) `CVE-2026-7770` · CVE record: IBM i Access Family · CVSS 8.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection - [itsourcecode Content Management System edit_topic.php sql injection](https://agentprime.io/advisories/CVE-2026-10265.md) `CVE-2026-10265` · CVE record: itsourcecode Content Management System · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Other injection, SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .