Other injection.

QueryMine sms GET Request Parameter editcourse.php sql injection

• QueryMine sms
• Other injection
• SQL injection

Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized input

• Red Hat Ansible Automation Platform 2
• Other injection

Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields

• expresstech Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
• Other injection

Flowise: Cypher Injection in GraphCypherQAChain

• Other injection

<3.1.0 · fixed in 3.1.0

Openfind｜MailGates/MailAudit - CRLF Injection

• Openfind MailGates
• Openfind MailAudit
• Other injection

Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()

• Other injection

<2.3.6 · fixed in 2.3.6

Serendipity has a Host Header Injection allows SMTP header injection via unvalidated HTTP_HOST in Message-ID email header

• Other injection

<2.6.0 · fixed in 2.6.0

CRLF injection in Schneider Electric PowerChute™ Serial Shutdown

• Schneider Electric PowerChute™ Serial Shutdown
• Other injection

mitmproxy has an LDAP Injection

• Other injection

<12.2.2 · fixed in 12.2.2

MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing

• 1Panel-dev MaxKB
• Other injection
• Authentication bypass

MaxKB has CSV Injection in its Application Chat Export Functionality

• 1Panel-dev MaxKB
• Other injection

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field

• Other injection

aandrew-me ytDownloader Compressor Feature compressor.js child_process.exec command injection

• aandrew-me ytDownloader
• Other injection
• Command injection

Maddy Mail Server has an LDAP Filter Injection via Unsanitized Username

• Other injection

<0.9.3 · fixed in 0.9.3

code-projects Easy Blog Site post.php sql injection

• code-projects Easy Blog Site
• Other injection
• SQL injection

PHPGurukul Daily Expense Tracking System register.php sql injection

• PHPGurukul Daily Expense Tracking System
• Other injection
• SQL injection

itsourcecode Construction Management System equipments.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

itsourcecode Construction Management System employees.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

• SourceCodester Pharmacy Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

• SourceCodester Pharmacy Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

• SourceCodester Pharmacy Sales and Inventory System
• Other injection
• SQL injection

code-projects Simple Content Management System index.php sql injection

• code-projects Simple Content Management System
• Other injection
• SQL injection

code-projects Simple Content Management System login.php sql injection

• code-projects Simple Content Management System
• Other injection
• SQL injection

code-projects Faculty Management System subject-print.php sql injection

• code-projects Faculty Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System Login_check.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Lost and Found Thing Management addcat.php sql injection

• code-projects Lost and Found Thing Management
• Other injection
• SQL injection

code-projects Lost and Found Thing Management catageory.php sql injection

• code-projects Lost and Found Thing Management
• Other injection
• SQL injection

code-projects Simple ChatBox Endpoint insert.php sql injection

• code-projects Simple ChatBox
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

tushar-2223 Hotel Management System roomdelete.php sql injection

• tushar-2223 Hotel Management System
• Other injection
• SQL injection

Warm-Flow has a SpEL Expression Injection in SpelHelper.parseExpression

• Other injection
• Code injection

<1.8.5 · fixed in 1.8.5

AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

• AstrBot
• Other injection
• Command injection

MetaGPT has an eval injection in metagpt/strategy/tot.py

• Other injection
• Code injection

<=0.8.2 · no fixed version yet

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

• Other injection

<5.2.2 · fixed in 5.2.2

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

• Other injection
• HTTP request smuggling

<0.31.0 || >=1.0.0, <1.15.0 · fixed in 0.31.0, 1.15.0

Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibility

• Other injection
• CWE-684

>=2.21.0, <2.25.4 || >=3.0.0-beta1, <=3.0.0-beta3 · fixed in 2.25.4

HTTP client proxy tunnel headers not validated for CR/LF

• Python Software Foundation CPython
• Other injection

Vikunja has iCalendar Property Injection via CRLF in CalDAV Task Output

• Other injection

<2.3.0 · fixed in 2.3.0

code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System AddVehicleFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection

• code-projects Vehicle Showroom Management System
• Other injection
• SQL injection

CodeAstro Online Classroom updatedetailsfromstudent.php sql injection

• CodeAstro Online Classroom
• Other injection
• SQL injection

code-projects Simple IT Discussion Forum add-category-function.php sql injection

• code-projects Simple IT Discussion Forum
• Other injection
• SQL injection

itsourcecode Construction Management System del1.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

CodeAstro Online Classroom takeassessment2.php sql injection

• CodeAstro Online Classroom
• Other injection
• SQL injection

itsourcecode Construction Management System del.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

code-projects Patient Record Management System edit_hpatient.php sql injection

• code-projects Patient Record Management System
• Other injection
• SQL injection

code-projects Patient Record Management System hematology_print.php sql injection

• code-projects Patient Record Management System
• Other injection
• SQL injection

code-projects Simple IT Discussion Forum delete-category.php sql injection

• code-projects Simple IT Discussion Forum
• Other injection
• SQL injection

code-projects Simple IT Discussion Forum crud.php sql injection

• code-projects Simple IT Discussion Forum
• Other injection
• SQL injection

MetaGPT has an Injection issue

• Other injection
• Code injection

<=0.8.1 · no fixed version yet

LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

• MISP
• Other injection

oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection

• AOSC-Dev oma
• Other injection

code-projects Simple IT Discussion Forum topic-details.php sql injection

• code-projects Simple IT Discussion Forum
• Other injection
• SQL injection

OPNsense has an LDAP Injection via Unsanitized Username in Authentication

• opnsense core
• Other injection