Other injection.

Tenda F456 httpd WriteFacMac FromWriteFacMac command injection

• Tenda F456
• Other injection
• Command injection

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

• SourceCodester Pharmacy Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

• SourceCodester Pharmacy Sales and Inventory System
• Other injection
• SQL injection

likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection

• likeadmin-likeshop likeadmin_php
• Other injection
• SQL injection

itsourcecode Courier Management System edit_parcel.php sql injection

• itsourcecode Courier Management System
• Other injection
• SQL injection

itsourcecode Courier Management System edit_branch.php sql injection

• itsourcecode Courier Management System
• Other injection
• SQL injection

itsourcecode Construction Management System locations.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

itsourcecode Construction Management System execute1.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

itsourcecode Construction Management System execute.php sql injection

• itsourcecode Construction Management System
• Other injection
• SQL injection

CodePanda Source canteen_management_system login.php sql injection

• CodePanda Source canteen_management_system
• Other injection
• SQL injection

Dynamic-Datasource has an Injection vulnerability

• Other injection
• CWE-707

<=4.5.0 · no fixed version yet

code-projects Inventory Management System Login sql injection

• code-projects Inventory Management System
• Other injection
• SQL injection

There is a cypher injection issue in LogonTracer prior to v2.0.0.

• Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) LogonTracer
• Other injection

D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection

• D-Link DIR-822
• Other injection
• Command injection

code-projects Employee Management System Endpoint eprocess.php sql injection

• code-projects Employee Management System
• Other injection
• SQL injection

liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

• liyupi yu-picture
• Other injection
• SQL injection

666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection

• 666ghj MiroFish
• Other injection
• Command injection

tufantunc ssh-mcp index.ts shell.write command injection

• tufantunc ssh-mcp
• Other injection
• Command injection

CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

• CodeAstro Online Job Portal
• Other injection
• SQL injection

ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection

• ByteDance coze-studio
• Other injection
• SQL injection

KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection

• KLiK SocialMediaWebsite
• Other injection
• SQL injection

Envoy Query Parameter header_mutation.cc params.add injection

• Envoy
• Other injection
• CWE-707

PicoClaw has an Injection issue in its Web Launcher Management Plane component

• Other injection
• Command injection

<=0.2.4 · no fixed version yet

colinhacks Zod CUID Data Type regexes.ts sql injection

• colinhacks Zod
• Other injection
• SQL injection

Tenda F453 Telnet Service telnet TendaTelnet command injection

• Tenda F453
• Other injection
• Command injection

ShowDoc has an Injection vulnerability

• Other injection
• SQL injection

<3.8.1 · fixed in 3.8.1

Divyanshu-hash GitPilot-MCP main.py repo_path command injection

• Divyanshu-hash GitPilot-MCP
• Other injection
• Command injection

JiZhiCMS addcache.html htmlspecialchars_decode sql injection

• JiZhiCMS
• Other injection
• SQL injection

Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field

• Other injection

<=1.2.8 · no fixed version yet

Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field

• Other injection

<=1.2.8 · no fixed version yet

Kirby has XML injection in its XML creator toolkit

• Other injection

<4.9.0 || >=5.0.0, <5.4.0 · fixed in 4.9.0, 5.4.0

i18next-locize-backend has URL Injection via Unsanitized Path Parameters

• Path traversal
• Other injection

<9.0.2 · fixed in 9.0.2

i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header

• Cross-site scripting (XSS)
• Other injection

<3.9.3 · fixed in 3.9.3

xmldom has XML injection through unvalidated DocumentType serialization

• Other injection

<=0.6.0 · no fixed version yet

xmldom has XML node injection through unvalidated processing instruction serialization

• Other injection

<=0.6.0 · no fixed version yet

xmldom has XML node injection through unvalidated comment serialization

• Other injection

<=0.6.0 · no fixed version yet

fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters

• Other injection

<5.7.0 · fixed in 5.7.0

i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns

• Path traversal
• Other injection

<3.0.5 · fixed in 3.0.5

PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes

• Command injection
• Other injection

>=12.5.21, <12.5.22 || >=13.1.5, <13.1.6 · fixed in 12.5.22, 13.1.6

LDAP DN injection

• PowerDNS Authoritative
• Other injection

HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Values

• zinoui HTTP Headers
• Other injection

Comfast CF-N1-S Endpoint mbox-config command injection

• Comfast CF-N1-S
• Other injection
• Command injection

User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups

• Fortra GoAnywhere MFT
• Other injection

HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT

• Fortra GoAnywhere MFT
• Other injection

Cockpit has NoSQL Injection Through Content Aggregation Pipelines

• Other injection
• CWE-20

<2.14.0 · fixed in 2.14.0

Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection

• Metasoft 美特软件 MetaCRM
• Other injection
• SQL injection

phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection

• phili67 Ecclesia CRM
• Other injection
• SQL injection

Langflow vulnerable to injection

• Other injection
• CWE-707

<=1.8.3 · no fixed version yet

AgentScope Vulnerable to Remote Code Injection

• Other injection
• Code injection

<=1.0.18 · no fixed version yet

CRLF injection in silex technology, Inc. SD-330AC and others

• silex technology, Inc. SD-330AC
• silex technology, Inc. AMC Manager
• Other injection

ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection

• ProjectsAndPrograms School Management System
• Other injection
• SQL injection

liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection

• liangliangyy DjangoBlog
• Other injection
• Command injection

dameng100 muucmf index.html getListByPage sql injection

• dameng100 muucmf
• Other injection
• SQL injection

MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

• Other injection

<4.16.0 · fixed in 4.16.0

PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes

• Command injection
• Other injection

>=12.5.21, <12.5.22 || >=13.1.5, <13.1.6 · fixed in 12.5.22, 13.1.6

FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover

• labring FastGPT
• Other injection

FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass

• labring FastGPT
• Other injection

Bouncy Castle has an LDAP injection

• Other injection

>=1.74, <1.84 · fixed in 1.84

LDAP Injection in PAC4J

• PAC4J
• Other injection

QueryMine sms GET Request Parameter deletecourse.php sql injection

• QueryMine sms
• Other injection
• SQL injection