Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 4.8 Medium
awwaiid mcp-server-taskwarrior vulnerable to command injection
- Other injection
- Command injection
<=1.0.1 · no fixed version yet
GHSA-95hg-3c55-xf9x · CVE-2026-5833 - CVSS 5.1 Medium
jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection
- jeecgboot JimuReport
- Other injection
- Code injection
- CVSS 5.1 Medium
PHPGurukul News Portal Project check_availability.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 5.1 Medium
PHPGurukul News Portal Project add-subcategory.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 5.1 Medium
PHPGurukul News Portal Project add-subadmins.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul News Portal Project news-details.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum content.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum addcomment.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum question-function.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Laundry System userchecklogin.php sql injection
- code-projects Simple Laundry System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Construction Management System borrowed_tool_report.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Online Course Registration check_availability.php sql injection
- PHPGurukul Online Course Registration
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Online Course Registration check_availability.php sql injection
- PHPGurukul Online Course Registration
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Easy Blog Site contact_us.php sql injection
- code-projects Easy Blog Site
- Other injection
- SQL injection
- CVSS 8.6 High
basic-ftp has FTP Command Injection via CRLF
- Other injection
>=5.2.0, <5.2.1 · fixed in 5.2.1
GHSA-chqc-8p9q-pq6q · CVE-2026-39983 - CVSS 8.1 High
CI4MS Vulnerable to .env CRLF Injection via Unvalidated `host` Parameter in Install Controller
- Other injection
<0.31.4.0 · fixed in 0.31.4.0
GHSA-vfhx-5459-qhqh · CVE-2026-39394 - CVSS 6.9 Medium
Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)
- Other injection
<8.0.5 · fixed in 8.0.5
GHSA-vvjj-xcjg-gr5g · CVE-2026-82853 - CVSS 6.9 Medium
Hono missing validation of cookie name on write path in setCookie()
- Other injection
- CWE-20
<4.12.12 · fixed in 4.12.12
GHSA-26pp-8wgv-hjvm · CVE-2026-56762 - CVSS 6.9 Medium
PowerJob's GroovyEvaluator.evaluate endpoint vulnerable to code injection
- Other injection
- Code injection
>=5.1.0, <=5.1.2 · no fixed version yet
GHSA-wpwf-v25w-54g3 · CVE-2026-5739 - CVSS 6.9 Medium
PowerJob vulnerable to SQL injection
- Other injection
- SQL injection
>=5.1.0, <=5.1.2 · no fixed version yet
GHSA-4fp2-3xgg-jg4w · CVE-2026-5736 - CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 5.3 Medium
itsourcecode Construction Management System borrowedtool.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode sanitize or validate this input Parameter borrowedequip.php sql injection
- itsourcecode sanitize or validate this input
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Construction Management System Parameter borrowed_tool.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 6.3 Medium
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')
- Other injection
<11.1.18 · fixed in 11.1.18
GHSA-36xv-jgw5-4q75 · CVE-2026-35515 - CVSS 7.3 High
Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation
- Information disclosure
- Other injection
<0.0.0-20260327055742-73679faa53cd · fixed in 0.0.0-20260327055742-73679faa53cd
GHSA-jfwg-rxf3-p7r9 - CVSS 6.9 Medium
code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 6.9 Medium
Cyber-III Student-Management-System Parameter login.php sql injection
- Cyber-III Student-Management-System
- Other injection
- SQL injection
- CVSS 8.5 High
Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers
- plunk
- Other injection
- CVSS 6.9 Medium
code-projects Online FIR System Login checklogin.php sql injection
- code-projects Online FIR System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Construction Management System Parameter borrowed_equip.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Online Application System for Admission Endpoint admsnform.php sql injection
- code-projects Online Application System for Admission
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Laundry System Parameter userfinishregister.php sql injection
- code-projects Simple Laundry System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Easy Blog Site login.php sql injection
- code-projects Easy Blog Site
- Other injection
- SQL injection
- CVSS 6.9 Medium
projectworlds Car Rental System Parameter pay.php sql injection
- projectworlds Car Rental System
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
projectworlds Car Rental System Parameter message_admin.php sql injection
- projectworlds Car Rental System
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
projectworlds Car Rental Project Parameter book_car.php sql injection
- projectworlds Car Rental Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
assafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injection
- assafelovic gpt-researcher
- Other injection
- Code injection
- CVSS 5.3 Medium
itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
griptape-ai griptape SqlTool tool.py sql injection
- griptape
- Other injection
- SQL injection
- CVSS 5.3 Medium
premAI-io premsql followup.py eval code injection
- premAI-io premsql
- Other injection
- Code injection
- CVSS 5.3 Medium
wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection
- wbbeyourself MAC-SQL
- Other injection
- SQL injection
- CVSS 5.3 Medium
zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection
- zhongyu09 openchatbi
- Other injection
- SQL injection
- CVSS 6.9 Medium
Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection
- Fosowl agenticSeek
- Other injection
- Code injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
- PHPGurukul Online Shopping Portal Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Online Classroom Parameter addvideos.php sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Online Classroom Parameter addassessment.php sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 6.9 Medium
Song-Li cross_browser details Endpoint uniquemachine_app.py sql injection
- Song-Li cross_browser
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester/jkev Record Management System Login index.php sql injection
- SourceCodester Record Management System
- jkev Record Management System
- Other injection
- SQL injection