# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection](https://agentprime.io/advisories/CVE-2026-14692.md) `CVE-2026-14692` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injection](https://agentprime.io/advisories/CVE-2026-14691.md) `CVE-2026-14691` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, Code injection - [CodeAstro Apartment Visitor Management System add-apartment.php sql injection](https://agentprime.io/advisories/CVE-2026-14689.md) `CVE-2026-14689` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Hotel Management System login.php sql injection](https://agentprime.io/advisories/CVE-2026-14688.md) `CVE-2026-14688` · CVE record: itsourcecode Online Hotel Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Job Portal login.php sql injection](https://agentprime.io/advisories/CVE-2026-14660.md) `CVE-2026-14660` · CVE record: code-projects Online Job Portal · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientappointment.php sql injection](https://agentprime.io/advisories/CVE-2026-14659.md) `CVE-2026-14659` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Assessment Management marking-scheme.php sql injection](https://agentprime.io/advisories/CVE-2026-14658.md) `CVE-2026-14658` · CVE record: code-projects Assessment Management · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Assessment Management Database Query marking-scheme.php sql injection](https://agentprime.io/advisories/CVE-2026-14657.md) `CVE-2026-14657` · CVE record: code-projects Assessment Management · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection](https://agentprime.io/advisories/CVE-2026-14654.md) `CVE-2026-14654` · CVE record: SourceCodester Simple and Nice Shopping Cart Script · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection](https://agentprime.io/advisories/CVE-2026-14653.md) `CVE-2026-14653` · CVE record: SourceCodester Simple and Nice Shopping Cart Script · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection](https://agentprime.io/advisories/CVE-2026-14652.md) `CVE-2026-14652` · CVE record: SourceCodester Simple and Nice Shopping Cart Script · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Voting System saveVote.php test_input sql injection](https://agentprime.io/advisories/CVE-2026-14649.md) `CVE-2026-14649` · CVE record: code-projects Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Voting System Login authentication.php test_input sql injection](https://agentprime.io/advisories/CVE-2026-14648.md) `CVE-2026-14648` · CVE record: code-projects Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_class2.php sql injection](https://agentprime.io/advisories/CVE-2026-14642.md) `CVE-2026-14642` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_course.php sql injection](https://agentprime.io/advisories/CVE-2026-14641.md) `CVE-2026-14641` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Apartment Visitor Management System Login index.php sql injection](https://agentprime.io/advisories/CVE-2026-14640.md) `CVE-2026-14640` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Ecommerce Website my_account.php sql injection](https://agentprime.io/advisories/CVE-2026-14639.md) `CVE-2026-14639` · CVE record: CodeAstro Ecommerce Website · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patient.php sql injection](https://agentprime.io/advisories/CVE-2026-14638.md) `CVE-2026-14638` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System medicine.php sql injection](https://agentprime.io/advisories/CVE-2026-14619.md) `CVE-2026-14619` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [@asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection](https://agentprime.io/advisories/GHSA-5c7w-4wm3-85vw.md) `GHSA-5c7w-4wm3-85vw` · npm `@asymmetric-effort/specifyjs`: affected `<0.2.136`, fixed in `0.2.136` · CVSS 4.0, no score published · Not analysed yet · Published 2 Jul 2026 · Tags: Other injection - [Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter](https://agentprime.io/advisories/CVE-2026-14249.md) `CVE-2026-14249` · CVE record: emarket-design Request a Quote – Quote Forms for Any WordPress Site · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Other injection - [WPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Name](https://agentprime.io/advisories/CVE-2026-12127.md) `CVE-2026-12127` · CVE record: smub WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Other injection - [Duplicate Advisory: Hono vulnerable to Vary Header Injection leading to potential CORS Bypass](https://agentprime.io/advisories/GHSA-cw3j-28qq-x3xh.md) `GHSA-cw3j-28qq-x3xh` · npm `hono`: affected `*`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 1 Jul 2026 · Tags: Other injection - [itsourcecode Hospital Management System patientchangepassword.php sql injection](https://agentprime.io/advisories/CVE-2026-13579.md) `CVE-2026-13579` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientdetail.php sql injection](https://agentprime.io/advisories/CVE-2026-13578.md) `CVE-2026-13578` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System insertbillingrecord.php sql injection](https://agentprime.io/advisories/CVE-2026-13572.md) `CVE-2026-13572` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [Log injection in Eclipse Foundation Eclipse CSI - PIA](https://agentprime.io/advisories/CVE-2026-12616.md) `CVE-2026-12616` · CVE record: Eclipse Foundation Eclipse CSI - PIA · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection - [weng-xianhu EyouCMS API index.php sql injection](https://agentprime.io/advisories/CVE-2026-13569.md) `CVE-2026-13569` · CVE record: weng-xianhu EyouCMS · CVSS 5.1 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System preview3.php sql injection](https://agentprime.io/advisories/CVE-2026-13566.md) `CVE-2026-13566` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_class1.php sql injection](https://agentprime.io/advisories/CVE-2026-13565.md) `CVE-2026-13565` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering](https://agentprime.io/advisories/GHSA-cfw7-6c5v-2wjq.md) `GHSA-cfw7-6c5v-2wjq`, `CVE-2026-44182`, `PYSEC-2026-362` · PyPI `jupyter-enterprise-gateway`: affected `<3.3.0`, fixed in `3.3.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection - [Header injection in TurboGears](https://agentprime.io/advisories/GHSA-8q38-w56m-qq2c.md) `GHSA-8q38-w56m-qq2c`, `CVE-2019-25101`, `PYSEC-2026-556` · PyPI `turbogears`: affected `<1.0.11.11`, fixed in `1.0.11.11` · CVSS 6.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection - [code-projects Real State Services single-list_sale.php add sql injection](https://agentprime.io/advisories/CVE-2026-13559.md) `CVE-2026-13559` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Hotel Management System controller.php add sql injection](https://agentprime.io/advisories/CVE-2026-13555.md) `CVE-2026-13555` · CVE record: itsourcecode Online Hotel Management System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Hotel Management System controller.php edit sql injection](https://agentprime.io/advisories/CVE-2026-13552.md) `CVE-2026-13552` · CVE record: itsourcecode Online Hotel Management System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Baptism Information Management System editBaptism.php sql injection](https://agentprime.io/advisories/CVE-2026-13551.md) `CVE-2026-13551` · CVE record: itsourcecode Baptism Information Management System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Baptism Information Management System delbaptism.php sql injection](https://agentprime.io/advisories/CVE-2026-13550.md) `CVE-2026-13550` · CVE record: itsourcecode Baptism Information Management System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System doctortimings.php sql injection](https://agentprime.io/advisories/CVE-2026-13548.md) `CVE-2026-13548` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System doctorprofile.php sql injection](https://agentprime.io/advisories/CVE-2026-13542.md) `CVE-2026-13542` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System doctorchangepassword.php sql injection](https://agentprime.io/advisories/CVE-2026-13541.md) `CVE-2026-13541` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection](https://agentprime.io/advisories/CVE-2026-13538.md) `CVE-2026-13538` · CVE record: Wavlink WL-NU516U1-A · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, Command injection - [CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection](https://agentprime.io/advisories/CVE-2026-13535.md) `CVE-2026-13535` · CVE record: CodeAstro Human Resource Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System departmentDoctor.php sql injection](https://agentprime.io/advisories/CVE-2026-13532.md) `CVE-2026-13532` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System department.php sql injection](https://agentprime.io/advisories/CVE-2026-13531.md) `CVE-2026-13531` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection](https://agentprime.io/advisories/CVE-2026-13530.md) `CVE-2026-13530` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [YzmCMS index.php sql injection](https://agentprime.io/advisories/CVE-2026-13529.md) `CVE-2026-13529` · CVE record: YzmCMS · CVSS 6.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System preview4.php sql injection](https://agentprime.io/advisories/CVE-2026-13527.md) `CVE-2026-13527` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_class.php sql injection](https://agentprime.io/advisories/CVE-2026-13526.md) `CVE-2026-13526` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection](https://agentprime.io/advisories/CVE-2026-13525.md) `CVE-2026-13525` · CVE record: CodeAstro Human Resource Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System preview5.php sql injection](https://agentprime.io/advisories/CVE-2026-13521.md) `CVE-2026-13521` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection](https://agentprime.io/advisories/CVE-2026-13520.md) `CVE-2026-13520` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Other injection, SQL injection - [antlr ANTLR4 gofmt GoTarget.java GoTarget command injection](https://agentprime.io/advisories/CVE-2026-13501.md) `CVE-2026-13501` · CVE record: antlr ANTLR4 · CVSS 4.8 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, Command injection - [antlr ANTLR4 Grammar Action Block OutputFile.java code injection](https://agentprime.io/advisories/CVE-2026-13500.md) `CVE-2026-13500` · CVE record: antlr ANTLR4 · CVSS 6.9 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, Code injection - [yashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection](https://agentprime.io/advisories/CVE-2026-13498.md) `CVE-2026-13498` · CVE record: yashpokharna2555 restaurent-management-system · CVSS 6.9 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System appointment.php sql injection](https://agentprime.io/advisories/CVE-2026-13497.md) `CVE-2026-13497` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System ajaxmedicine.php sql injection](https://agentprime.io/advisories/CVE-2026-13496.md) `CVE-2026-13496` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System adminprofile.php sql injection](https://agentprime.io/advisories/CVE-2026-13495.md) `CVE-2026-13495` · CVE record: itsourcecode Hospital Management System · CVSS 5.1 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System preview7.php sql injection](https://agentprime.io/advisories/CVE-2026-13488.md) `CVE-2026-13488` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System archive.php sql injection](https://agentprime.io/advisories/CVE-2026-13487.md) `CVE-2026-13487` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System preview6.php sql injection](https://agentprime.io/advisories/CVE-2026-13486.md) `CVE-2026-13486` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 28 Jun 2026 · Tags: Other injection, SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .