Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
itsourcecode Courier Management System manage_user.php sql injection
- itsourcecode Courier Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections
- RRWO Mojolicious::Plugin::Statsd
- Other injection
- CWE-150
- CVSS 6.9 Medium
code-projects Project Management System Login chk.php sql injection
- code-projects Project Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Student Transcript Processing System index.php sql injection
- itsourcecode Student Transcript Processing System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Student Transcript Processing System trans.php sql injection
- itsourcecode Student Transcript Processing System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Student Transcript Processing System index.php sql injection
- itsourcecode Student Transcript Processing System
- Other injection
- SQL injection
- CVSS 2.3 Low
ThingsBoard YAML provision getGatewayDockerComposeFile code injection
- ThingsBoard
- Other injection
- Code injection
- CVSS 6.9 Medium
Das Parking Management System 停车场管理系统 Search API Endpoint sql injection
- Das Parking Management System 停车场管理系统
- Other injection
- SQL injection
- CVSS 6.9 Medium
Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injection
- Das Parking Management System 停车场管理系统
- Other injection
- SQL injection
- CVSS 5.3 Medium
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability
- Other injection
<3.6.4 · fixed in 3.6.4
GHSA-g283-w6fp-c4fc · CVE-2026-46745 - CVSS 6.9 Medium
hermes-agent has an Injection issue
- Other injection
- CWE-707
<0.15.0 · fixed in 0.15.0
GHSA-pgp4-xr4j-h5cg · CVE-2026-9366 - CVSS 6.9 Medium
hermes-agent has an Injection issue
- Other injection
- CWE-707
<0.15.0 · fixed in 0.15.0
GHSA-238w-f66p-w349 · CVE-2026-9353 - CVSS 9.8 CriticalCritical · CVSS 9+
Apache CXF has an LDAP injection vulnerability
- Other injection
>=4.2.0, <4.2.1 || >=4.1.0, <4.1.6 || <3.6.11 · fixed in 4.2.1, 4.1.6, 3.6.11
GHSA-pg32-686q-qh6x · CVE-2026-44930 - CVSS 6.9 Medium
Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Leave Management System add_staff.php sql injection
- CodeAstro Leave Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System delete_judge.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System edit_team.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System edit_judge.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 5.3 Medium
xianrendzw EasyReport REST Endpoint execute sql injection
- xianrendzw EasyReport
- Other injection
- SQL injection
- CVSS 6.9 Medium
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection
- Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection
- yashpokharna2555 StudentManagementSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection
- yashpokharna2555 StudentManagementSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 StudentManagementSystem success.php sql injection
- yashpokharna2555 StudentManagementSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
CRLF injection in WebSocket upgrade request in hackney
- Other injection
>=2.0.0, <4.0.1 · fixed in 4.0.1
GHSA-f9vr-g2g2-x9fg · CVE-2026-47072 - CVSS 6.8 Medium
CR/LF injection in query parameter in hackney
- Other injection
>=0.13.1, <4.0.1 · fixed in 4.0.1
GHSA-j9wq-vxxc-94wf · CVE-2026-47075 - CVSS 2.1 Low
CRLF injection in cookie domain/path options in hackney
- Other injection
>=0.9.0, <4.0.1 · fixed in 4.0.1
GHSA-mp55-p8c9-rfw2 · CVE-2026-47069 - CVSS 6.9 Medium
FoundDream miniclawd SkillsLoader skills-loader.ts which command injection
- FoundDream miniclawd
- Other injection
- Command injection
- CVSS 5.3 Medium
code-projects Employee Management System applyleaveprocess.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System psubmit.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System changepassemp.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Simple POS and Inventory System search.php sql injection
- SourceCodester Simple POS and Inventory System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Simple POS and Inventory System edit_customer.php sql injection
- SourceCodester Simple POS and Inventory System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection
- SourceCodester Simple POS and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Edimax BR-6478AC POST Request formiNICbasic command injection
- Edimax BR-6478AC
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6478AC POST Request formAccept command injection
- Edimax BR-6478AC
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD stainfo command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 5.1 Medium
Edimax BR-6675nD POST Request mp command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 6.9 Medium
KLiK SocialMediaWebsite HTTP POST Request Parameter injection
- KLiK SocialMediaWebsite
- Other injection
- CWE-707
- CVSS 5.3 Medium
KLiK SocialMediaWebsite HTTP GET Request Parameter injection
- KLiK SocialMediaWebsite
- Other injection
- CWE-707
- CVSS 5.3 Medium
SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection
- SourceCodester Indian Invoicing System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formWlanMP command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formUSBStorage command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System login.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formWpsStart command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6675nD POST Request formHwSet command injection
- Edimax BR-6675nD
- Other injection
- Command injection
- CVSS 6.9 Medium
projectworlds Online Art Gallery Shop adminHome.php sql injection
- projectworlds Online Art Gallery Shop
- Other injection
- SQL injection
- CVSS 5.3 Medium
Edimax EW-7438RPn POST Request formEZCHNwlanSetu formEZCHNwlanSetup command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn Setting formConnectionSetting command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn POST Request formAccep formAccept command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7438RPn POST Request formHwSet command injection
- Edimax EW-7438RPn
- Other injection
- Command injection
- CVSS 6.9 Medium
SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
- SourceCodester Hospitals Patient Records Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection
- SourceCodester Hospitals Patient Records Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
NousResearch hermes-agent Slack Agent/Mattermost Agent escape output
- NousResearch hermes-agent
- Other injection
- CWE-116
- CVSS 5.3 Medium
SourceCodester Hospitals Patient Records Management System view_history.php sql injection
- SourceCodester Hospitals Patient Records Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
QuantumNous new-api self Endpoint topup.go SearchAllTopUps sql injection
- QuantumNous new-api
- Other injection
- SQL injection
- CVSS 5.3 Medium
546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection
- 546669204 vps-inventory-monitoring
- Other injection
- Code injection
- CVSS 5.3 Medium
Edimax BR-6428NS POST Request formWlbasic command injection
- Edimax BR-6428NS
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax BR-6428NS POST Request formWlanM system command injection
- Edimax BR-6428NS
- Other injection
- Command injection
- CVSS 4.6 Medium
RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps
- bestpractical rt
- Other injection