# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection](https://agentprime.io/advisories/CVE-2026-3790.md) `CVE-2026-3790` · CVE record: SourceCodester Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Other injection, SQL injection - [EasyCMS Request Parameter RbacuserAction.class.php sql injection](https://agentprime.io/advisories/CVE-2026-3786.md) `CVE-2026-3786` · CVE record: EasyCMS · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [EasyCMS Request Parameter RbacnodeAction.class.php sql injection](https://agentprime.io/advisories/CVE-2026-3785.md) `CVE-2026-3785` · CVE record: EasyCMS · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester/janobe Resort Reservation System accomodation.php sql injection](https://agentprime.io/advisories/CVE-2026-3771.md) `CVE-2026-3771` · CVE record: SourceCodester Resort Reservation System and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode sanitize or validate this input teacher-attendance.php sql injection](https://agentprime.io/advisories/CVE-2026-3767.md) `CVE-2026-3767` · CVE record: itsourcecode sanitize or validate this input · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode University Management System att_single_view.php sql injection](https://agentprime.io/advisories/CVE-2026-3765.md) `CVE-2026-3765` · CVE record: itsourcecode University Management System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode University Management System view_result.php sql injection](https://agentprime.io/advisories/CVE-2026-3760.md) `CVE-2026-3760` · CVE record: itsourcecode University Management System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [projectworlds Online Art Gallery Shop adminHome.php sql injection](https://agentprime.io/advisories/CVE-2026-3759.md) `CVE-2026-3759` · CVE record: projectworlds Online Art Gallery Shop · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [projectworlds Online Art Gallery Shop adminHome.php sql injection](https://agentprime.io/advisories/CVE-2026-3758.md) `CVE-2026-3758` · CVE record: projectworlds Online Art Gallery Shop · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [projectworlds Online Art Gallery Shop pass sql injection](https://agentprime.io/advisories/CVE-2026-3757.md) `CVE-2026-3757` · CVE record: projectworlds Online Art Gallery Shop · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Sales and Inventory System check_item_details.php sql injection](https://agentprime.io/advisories/CVE-2026-3756.md) `CVE-2026-3756` · CVE record: SourceCodester Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Sales and Inventory System POST check_customer_details.php sql injection](https://agentprime.io/advisories/CVE-2026-3755.md) `CVE-2026-3755` · CVE record: SourceCodester Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Sales and Inventory System add_stock.php sql injection](https://agentprime.io/advisories/CVE-2026-3754.md) `CVE-2026-3754` · CVE record: SourceCodester Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Sales and Inventory System add_sales_print.php sql injection](https://agentprime.io/advisories/CVE-2026-3753.md) `CVE-2026-3753` · CVE record: SourceCodester Sales and Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injection](https://agentprime.io/advisories/CVE-2026-3752.md) `CVE-2026-3752` · CVE record: SourceCodester Employee Task Management System · CVSS 5.1 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injection](https://agentprime.io/advisories/CVE-2026-3751.md) `CVE-2026-3751` · CVE record: SourceCodester Employee Task Management System · CVSS 5.1 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode University Management System add_result.php sql injection](https://agentprime.io/advisories/CVE-2026-3747.md) `CVE-2026-3747` · CVE record: itsourcecode University Management System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple Responsive Tourism Website Login Login.php sql injection](https://agentprime.io/advisories/CVE-2026-3746.md) `CVE-2026-3746` · CVE record: SourceCodester Simple Responsive Tourism Website · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Student Web Portal profile.php sql injection](https://agentprime.io/advisories/CVE-2026-3745.md) `CVE-2026-3745` · CVE record: code-projects Student Web Portal · CVSS 5.3 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Student Web Portal signup.php valreg_passwdation sql injection](https://agentprime.io/advisories/CVE-2026-3744.md) `CVE-2026-3744` · CVE record: code-projects Student Web Portal · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode University Management System admin_search_student.php sql injection](https://agentprime.io/advisories/CVE-2026-3740.md) `CVE-2026-3740` · CVE record: itsourcecode University Management System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection](https://agentprime.io/advisories/CVE-2026-3736.md) `CVE-2026-3736` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection](https://agentprime.io/advisories/CVE-2026-3735.md) `CVE-2026-3735` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode Free Hotel Reservation System index.php sql injection](https://agentprime.io/advisories/CVE-2026-3730.md) `CVE-2026-3730` · CVE record: itsourcecode Free Hotel Reservation System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System Admindelete.php sql injection](https://agentprime.io/advisories/CVE-2026-3723.md) `CVE-2026-3723` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection](https://agentprime.io/advisories/CVE-2026-3711.md) `CVE-2026-3711` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 5.1 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System Adminadd.php sql injection](https://agentprime.io/advisories/CVE-2026-3710.md) `CVE-2026-3710` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 5.1 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System register.php sql injection](https://agentprime.io/advisories/CVE-2026-3709.md) `CVE-2026-3709` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System login.php sql injection](https://agentprime.io/advisories/CVE-2026-3708.md) `CVE-2026-3708` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection](https://agentprime.io/advisories/CVE-2026-3705.md) `CVE-2026-3705` · CVE record: code-projects Simple Flight Ticket Booking System · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, SQL injection - [Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection](https://agentprime.io/advisories/CVE-2026-3704.md) `CVE-2026-3704` · CVE record: Wavlink NU516U1 · CVSS 5.1 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Other injection, Command injection - [welovemedia FFmate ffmpeg.go Execute argument injection](https://agentprime.io/advisories/CVE-2026-3682.md) `CVE-2026-3682` · CVE record: welovemedia FFmate · CVSS 5.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Other injection, Command injection - [RyuzakiShinji biome-mcp-server biome-mcp-server.ts command injection](https://agentprime.io/advisories/CVE-2026-3680.md) `CVE-2026-3680` · CVE record: RyuzakiShinji biome-mcp-server · CVSS 5.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Other injection, Command injection - [JeecgBoot getDictItems isExistSqlInjectKeyword sql injection](https://agentprime.io/advisories/CVE-2026-3672.md) `CVE-2026-3672` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Other injection, SQL injection - [Wavlink WL-NU516U1 adm.cgi usb_p910 command injection](https://agentprime.io/advisories/CVE-2026-3662.md) `CVE-2026-3662` · CVE record: Wavlink WL-NU516U1 · CVSS 5.1 Medium · EPSS 0.20 · Not analysed yet · Published 7 Mar 2026 · Tags: Other injection, Command injection - [Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection](https://agentprime.io/advisories/CVE-2026-3661.md) `CVE-2026-3661` · CVE record: Wavlink WL-NU516U1 · CVSS 5.1 Medium · EPSS 0.20 · Not analysed yet · Published 7 Mar 2026 · Tags: Other injection, Command injection - [Apache ZooKeeper has improper handling of configuration values](https://agentprime.io/advisories/GHSA-crhr-qqj8-rpxc.md) `GHSA-crhr-qqj8-rpxc`, `BIT-zookeeper-2026-24308`, `CVE-2026-24308` · Maven `org.apache.zookeeper:zookeeper`: affected `>=3.9.0, <3.9.5 || >=3.8.0, <3.8.6`, fixed in `3.9.5`, `3.8.6` · CVSS 6.5 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Other injection, Information disclosure - [Caddy's vars_regexp double-expands user input, leaking env vars and files](https://agentprime.io/advisories/GHSA-m2w3-8f23-hxxf.md) `GHSA-m2w3-8f23-hxxf`, `CVE-2026-30852`, `GO-2026-4644` · Go `github.com/caddyserver/caddy/v2/modules/caddyhttp`: affected `>=2.7.5, <2.11.2`, fixed in `2.11.2` · CVSS 5.5 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Other injection, Information disclosure - [Rocket.Chat: NoSQL injection in the EE ddp-streamer-service](https://agentprime.io/advisories/CVE-2026-30833.md) `CVE-2026-30833` · CVE record: RocketChat Rocket.Chat · CVSS 6.9 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Other injection - [TinyWeb: HTTP Header Control Character Injection into CGI Environment](https://agentprime.io/advisories/CVE-2026-29046.md) `CVE-2026-29046` · CVE record: maximmasiutin TinyWeb · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Mar 2026 · Tags: Other injection, CWE-20, CWE-114 - [DefaultFuction Jeson Customer Relationship Management System edit.php sql injection](https://agentprime.io/advisories/CVE-2026-3616.md) `CVE-2026-3616` · CVE record: DefaultFuction Jeson Customer Relationship Management System · CVSS 5.3 Medium · Not analysed yet · Published 6 Mar 2026 · Tags: Other injection, SQL injection - [Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection](https://agentprime.io/advisories/CVE-2026-3612.md) `CVE-2026-3612` · CVE record: Wavlink WL-NU516U1 · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 6 Mar 2026 · Tags: Other injection, Command injection - [MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery](https://agentprime.io/advisories/GHSA-g7hc-96xr-gvvx.md) `GHSA-g7hc-96xr-gvvx`, `CVE-2026-30227` · NuGet `MimeKit`: affected `<4.15.1`, fixed in `4.15.1` · CVSS 6.9 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Other injection - [@perfood/couch-auth has a host header injection vulnerability](https://agentprime.io/advisories/GHSA-qw8v-34ww-6q9p.md) `GHSA-qw8v-34ww-6q9p`, `CVE-2025-70948` · npm `@perfood/couch-auth`: affected `<=0.26.0`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: Other injection, CWE-644 - [TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution](https://agentprime.io/advisories/GHSA-928r-fm4v-mvrw.md) `GHSA-928r-fm4v-mvrw`, `CVE-2026-29186` · npm `@backstage/plugin-techdocs-node`: affected `<1.14.3`, fixed in `1.14.3` · CVSS 7.7 High · Not analysed yet · Published 5 Mar 2026 · Tags: Other injection, Unrestricted file upload, CWE-791 - [OnDemand susceptible to malicious input when navigating to a directory.](https://agentprime.io/advisories/CVE-2026-26002.md) `CVE-2026-26002` · CVE record: OSC ondemand · CVSS 6.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Other injection - [LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl](https://agentprime.io/advisories/CVE-2026-25750.md) `CVE-2026-25750` · CVE record: langchain-ai helm · CVSS 8.5 High · Not analysed yet · Published 4 Mar 2026 · Tags: Other injection - [Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie()](https://agentprime.io/advisories/GHSA-5pq2-9x2x-5p6w.md) `GHSA-5pq2-9x2x-5p6w`, `CVE-2026-29086` · npm `hono`: affected `<4.12.4`, fixed in `4.12.4` · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Other injection, CWE-1113 - [Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE()](https://agentprime.io/advisories/GHSA-p6xx-57qc-3wxr.md) `GHSA-p6xx-57qc-3wxr`, `CVE-2026-29085` · npm `hono`: affected `<4.12.4`, fixed in `4.12.4` · CVSS 6.5 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Other injection - [Log Pollution - Control Characters Not Escaped](https://agentprime.io/advisories/CVE-2025-59784.md) `CVE-2025-59784` · CVE record: 2N Telekomunikace a.s. 2N Access Commander · CVSS 6.9 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Other injection - [XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101](https://agentprime.io/advisories/CVE-2026-28770.md) `CVE-2026-28770` · CVE record: International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management interface · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Other injection - [itsourcecode College Management System class-result.php sql injection](https://agentprime.io/advisories/CVE-2026-3487.md) `CVE-2026-3487` · CVE record: itsourcecode College Management System · CVSS 5.1 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Other injection, SQL injection - [MCP NMAP Server has an Injection vulnerability](https://agentprime.io/advisories/GHSA-xc68-rrqc-qgq3.md) `GHSA-xc68-rrqc-qgq3`, `CVE-2026-3484` · npm `mcp-nmap-server`: affected `<=1.0.1`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Other injection, Command injection - [itsourcecode College Management System student-fee.php sql injection](https://agentprime.io/advisories/CVE-2026-3486.md) `CVE-2026-3486` · CVE record: itsourcecode College Management System · CVSS 5.1 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Other injection, SQL injection - [Ghost Vulnerable to Remote Code Execution via Malicious Themes](https://agentprime.io/advisories/GHSA-cgc2-rcrh-qr5x.md) `GHSA-cgc2-rcrh-qr5x`, `BIT-ghost-2026-29053`, `CVE-2026-29053` · npm `ghost`: affected `>=0.7.2, <6.19.1`, fixed in `6.19.1` · CVSS 7.7 High · Not analysed yet · Published 3 Mar 2026 · Tags: Other injection - [itsourcecode University Management System admin_single_student.php sql injection](https://agentprime.io/advisories/CVE-2026-3413.md) `CVE-2026-3413` · CVE record: itsourcecode University Management System · CVSS 6.9 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode University Management System admin_single_student_update.php sql injection](https://agentprime.io/advisories/CVE-2026-3411.md) `CVE-2026-3411` · CVE record: itsourcecode University Management System · CVSS 6.9 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Other injection, SQL injection - [itsourcecode Society Management System check_studid.php sql injection](https://agentprime.io/advisories/CVE-2026-3410.md) `CVE-2026-3410` · CVE record: itsourcecode Society Management System · CVSS 6.9 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Other injection, SQL injection - [eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection](https://agentprime.io/advisories/CVE-2026-3409.md) `CVE-2026-3409` · CVE record: eosphoros-ai db-gpt · CVSS 6.9 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Other injection, Code injection - [projectworlds Online Art Gallery Shop Registration registration.php sql injection](https://agentprime.io/advisories/CVE-2026-3406.md) `CVE-2026-3406` · CVE record: projectworlds Online Art Gallery Shop · CVSS 6.9 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Other injection, SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .