# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection](https://agentprime.io/advisories/CVE-2026-79698.md) `CVE-2026-79698` · CVE record: Advantech WISE-6610-NB and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, Command injection - [Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection](https://agentprime.io/advisories/CVE-2026-79697.md) `CVE-2026-79697` · CVE record: Advantech WISE-6610-NB and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, Command injection - [itsourcecode Sales and Inventory System settings_edit.php sql injection](https://agentprime.io/advisories/CVE-2026-86270.md) `CVE-2026-86270` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System emp_edit1.php sql injection](https://agentprime.io/advisories/CVE-2026-86269.md) `CVE-2026-86269` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode School Management System User_Login.php sql injection](https://agentprime.io/advisories/CVE-2026-86268.md) `CVE-2026-86268` · CVE record: itsourcecode School Management System · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Information System Society Membership System check_student.php sql injection](https://agentprime.io/advisories/CVE-2026-86267.md) `CVE-2026-86267` · CVE record: itsourcecode Information System Society Membership System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System us_transac.php sql injection](https://agentprime.io/advisories/CVE-2026-86265.md) `CVE-2026-86265` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System sup_transac.php sql injection](https://agentprime.io/advisories/CVE-2026-86245.md) `CVE-2026-86245` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System pro_transac.php add sql injection](https://agentprime.io/advisories/CVE-2026-86236.md) `CVE-2026-86236` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System pos_transac.php add sql injection](https://agentprime.io/advisories/CVE-2026-86235.md) `CVE-2026-86235` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System cust_transac.php add sql injection](https://agentprime.io/advisories/CVE-2026-86234.md) `CVE-2026-86234` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System us_del.php sql injection](https://agentprime.io/advisories/CVE-2026-86233.md) `CVE-2026-86233` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System sup_del.php sql injection](https://agentprime.io/advisories/CVE-2026-86232.md) `CVE-2026-86232` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86225.md) `CVE-2026-86225` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86224.md) `CVE-2026-86224` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86223.md) `CVE-2026-86223` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86222.md) `CVE-2026-86222` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86221.md) `CVE-2026-86221` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86220.md) `CVE-2026-86220` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [Mstfakts College-Management-System Search university.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-86213.md) `CVE-2026-86213` · CVE record: Mstfakts College-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [rabindralamsal inventory-management-system Login index.php sql injection](https://agentprime.io/advisories/CVE-2026-86211.md) `CVE-2026-86211` · CVE record: rabindralamsal inventory-management-system · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System delete_user_account.php sql injection](https://agentprime.io/advisories/CVE-2026-86210.md) `CVE-2026-86210` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [Ninja Forms 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution via IP and Referer Merge Tags](https://agentprime.io/advisories/CVE-2026-80437.md) `CVE-2026-80437` · CVE record: Unknown Ninja Forms · CVSS 4.8 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection - [Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags](https://agentprime.io/advisories/CVE-2026-80439.md) `CVE-2026-80439` · CVE record: Unknown Redirection for Contact Form 7 · CVSS 4.8 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection - [JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action](https://agentprime.io/advisories/CVE-2026-19862.md) `CVE-2026-19862` · CVE record: Unknown JetFormBuilder · CVSS 4.8 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection - [JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter](https://agentprime.io/advisories/CVE-2026-19859.md) `CVE-2026-19859` · CVE record: Unknown JetFormBuilder · CVSS 6.5 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection - [SourceCodester Class and Exam Timetabling System delete_user.php sql injection](https://agentprime.io/advisories/CVE-2026-86209.md) `CVE-2026-86209` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection](https://agentprime.io/advisories/CVE-2026-86208.md) `CVE-2026-86208` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Task Management System In PHP Login index.php sql injection](https://agentprime.io/advisories/CVE-2026-86180.md) `CVE-2026-86180` · CVE record: code-projects Task Management System In PHP · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [DefaultFuction CRM delete.php sql injection](https://agentprime.io/advisories/CVE-2026-86172.md) `CVE-2026-86172` · CVE record: DefaultFuction CRM · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [DefaultFuction CRM delete.php sql injection](https://agentprime.io/advisories/CVE-2026-86171.md) `CVE-2026-86171` · CVE record: DefaultFuction CRM · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [DefaultFuction CRM edit.php sql injection](https://agentprime.io/advisories/CVE-2026-86170.md) `CVE-2026-86170` · CVE record: DefaultFuction CRM · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Content Management System login.php sql injection](https://agentprime.io/advisories/CVE-2026-86168.md) `CVE-2026-86168` · CVE record: code-projects Content Management System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System trans_view.php sql injection](https://agentprime.io/advisories/CVE-2026-86164.md) `CVE-2026-86164` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System pro_del.php sql injection](https://agentprime.io/advisories/CVE-2026-86163.md) `CVE-2026-86163` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Online Voting System ajax.php login sql injection](https://agentprime.io/advisories/CVE-2026-86162.md) `CVE-2026-86162` · CVE record: SourceCodester Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Online Voting System ajax.php delete_category sql injection](https://agentprime.io/advisories/CVE-2026-86161.md) `CVE-2026-86161` · CVE record: SourceCodester Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Online Voting System ajax.php delete_voting sql injection](https://agentprime.io/advisories/CVE-2026-86160.md) `CVE-2026-86160` · CVE record: SourceCodester Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [SourceCodester Online Voting System ajax.php save_user sql injection](https://agentprime.io/advisories/CVE-2026-86159.md) `CVE-2026-86159` · CVE record: SourceCodester Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Other injection, SQL injection - [IXON VPN Client CRLF Injection](https://agentprime.io/advisories/CVE-2026-75925.md) `CVE-2026-75925` · CVE record: IXON IXON VPN Client · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection - [code-projects Online Shopping System adduser.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-85643.md) `CVE-2026-85643` · CVE record: code-projects Online Shopping System · CVSS 5.1 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [Vulnerabilities exists in IBM Cloud Pak for Data System](https://agentprime.io/advisories/CVE-2026-14350.md) `CVE-2026-14350` · CVE record: IBM Cloud Pak for Data System · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection - [code-projects Vehicle Management System busprofile.php sql injection](https://agentprime.io/advisories/CVE-2026-85516.md) `CVE-2026-85516` · CVE record: code-projects Vehicle Management System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Doctor Appointment System contactus.php sql injection](https://agentprime.io/advisories/CVE-2026-85403.md) `CVE-2026-85403` · CVE record: code-projects Doctor Appointment System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Doctor Appointment System booking.php sql injection](https://agentprime.io/advisories/CVE-2026-85402.md) `CVE-2026-85402` · CVE record: code-projects Doctor Appointment System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Hospital Information System PrespController.php getSinglePresp sql injection](https://agentprime.io/advisories/CVE-2026-85399.md) `CVE-2026-85399` · CVE record: code-projects Hospital Information System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Hospital Information System viewReq.php viewReq sql injection](https://agentprime.io/advisories/CVE-2026-85398.md) `CVE-2026-85398` · CVE record: code-projects Hospital Information System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [code-projects Hospital Information System addReq.php findBySearch sql injection](https://agentprime.io/advisories/CVE-2026-85397.md) `CVE-2026-85397` · CVE record: code-projects Hospital Information System · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales and Inventory System inv_del.php sql injection](https://agentprime.io/advisories/CVE-2026-85383.md) `CVE-2026-85383` · CVE record: itsourcecode Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [light0011 cms Query Builder ChapterController.class.php searchChapter sql injection](https://agentprime.io/advisories/CVE-2026-85379.md) `CVE-2026-85379` · CVE record: light0011 cms · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Other injection, SQL injection - [Microsoft Discovery Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-62906.md) `CVE-2026-62906` · CVE record: Microsoft Microsoft Discovery Studio · CVSS 7.4 High · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection - [code-projects Doctor Appointment System patient_login.php sql injection](https://agentprime.io/advisories/CVE-2026-85225.md) `CVE-2026-85225` · CVE record: code-projects Doctor Appointment System · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, SQL injection - [Vulnerabilities exists in IBM Netezza Software](https://agentprime.io/advisories/CVE-2026-9736.md) `CVE-2026-9736` · CVE record: IBM Netezza Software · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection - [itsourcecode Online Medicine Delivery System Wishlist controller.php addwishlist sql injection](https://agentprime.io/advisories/CVE-2026-85205.md) `CVE-2026-85205` · CVE record: itsourcecode Online Medicine Delivery System · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injection](https://agentprime.io/advisories/CVE-2026-85187.md) `CVE-2026-85187` · CVE record: itsourcecode Online Medicine Delivery System · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, SQL injection - [SeaCMS WeChat index.php addslashes sql injection](https://agentprime.io/advisories/CVE-2026-85138.md) `CVE-2026-85138` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, SQL injection - [SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection](https://agentprime.io/advisories/CVE-2026-85137.md) `CVE-2026-85137` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, Code injection - [Authenticated KMS request forgery via CRLF injection in GCP key identifier strings](https://agentprime.io/advisories/CVE-2026-84962.md) `CVE-2026-84962` · CVE record: MongoDB libmongocrypt · CVSS 5.7 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection - [n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes](https://agentprime.io/advisories/CVE-2026-85167.md) `CVE-2026-85167` · CVE record: n8n-io n8n · CVSS 6.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection - [CSV injection in Hitachi Energy MicroSCADA SYS600](https://agentprime.io/advisories/CVE-2026-9852.md) `CVE-2026-9852` · CVE record: Hitachi Energy MicroSCADA SYS600 · CVSS 4.6 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .