Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System index1.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System index2.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection
- erzhongxmu JeeWMS
- Other injection
- CWE-707
- CVSS 6.9 Medium
Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection
- Chanjet CRM
- Other injection
- SQL injection
- CVSS 2.3 Low
FoundationAgents MetaGPT common.py check_cmd_exists command injection
- FoundationAgents MetaGPT
- Other injection
- Command injection
- CVSS 5.3 Medium
Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection
- Tiobon Employee Self-Service System
- Other injection
- SQL injection
- CVSS 6.9 Medium
GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection
- GL.iNet GL-MT3000
- Other injection
- Command injection
- CVSS 6.9 Medium
GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection
- GL.iNet GL-MT3000
- Other injection
- Command injection
- CVSS 6.9 Medium
GL.iNet GL-MT3000 Path Normalization dlopen command injection
- GL.iNet GL-MT3000
- Other injection
- Command injection
- CVSS 5.3 Medium
GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection
- GL.iNet GL-MT3000
- Other injection
- Command injection
- CVSS 5.1 Medium
GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
- GL.iNet GL-MT3000
- Other injection
- Command injection
- CVSS 5.3 Medium
GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection
- GL.iNet GL-MT3000
- Other injection
- Command injection
- CVSS 6.9 Medium
Jinher OA nextselectplan.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
- CVSS 5.3 Medium
Jinher OA GetFormSn.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
- CVSS 5.3 Medium
GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection
- GL.iNet MT3000
- Other injection
- Command injection
- CVSS 5.3 Medium
Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action
- qriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors
- Other injection
- CVSS 6.9 Medium
code-projects Hotel and Tourism Reservation System details.php sql injection
- code-projects Hotel and Tourism Reservation System
- Other injection
- SQL injection
- CVSS 5.3 Medium
D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection
- D-Link DWR-M920
- Other injection
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags
- BINARY DataDog::DogStatsd
- Other injection
- CWE-150
- CVSS 9.1 CriticalCritical · CVSS 9+
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections
- BINARY DataDog::DogStatsd
- Other injection
- CWE-150
- CVSS 6.9 Medium
tittuvarghese CollegeManagementSystem fetch.php sql injection
- tittuvarghese CollegeManagementSystem
- Other injection
- SQL injection
- CVSS 5.3 Medium
D-Link DWR-M920 formSmsManage sub_41C8E8 command injection
- D-Link DWR-M920
- Other injection
- Command injection
- CVSS 6.9 Medium
SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection
- SourceCodester Ship Ferry Ticket Reservation System
- Other injection
- SQL injection
- CVSS 8.1 High
XML injection in Google Chrome
- Google Chrome
- Other injection
- CVSS 5.3 Medium
projectworlds Online Art Gallery Shop Project adminHome.ph sql injection
- projectworlds Online Art Gallery Shop Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
projectworlds Online Art Gallery Shop Project adminHome.php sql injection
- projectworlds Online Art Gallery Shop Project
- Other injection
- SQL injection
- CVSS 6.5 Medium
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
- Copilot Chat (Microsoft Edge)
- Other injection
- CVSS 4.0, no score published
Spree: CSV Formula Injection in Customer Export
- Other injection
>=5.2.0, <5.2.8 || >=5.3.0, <5.3.6 || >=5.4.0, <5.4.3 · fixed in 5.2.8, 5.3.6, 5.4.3
GHSA-xf4v-w5x5-pv79 - CVSS 4.3 Medium
Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection
- Other injection
- CWE-1287
<4.12.21 · fixed in 4.12.21
GHSA-3hrh-pfw6-9m5x · CVE-2026-47675 - CVSS 7.4 High
CRLF injection in freedesktop libinput
- freedesktop libinput
- Other injection
- CVSS 7.5 High
Etsy::StatsD versions through 1.002002 for Perl allow metric injections
- SANBEG Etsy::StatsD
- Other injection
- CWE-150
- CVSS 5.3 Medium
Net::Statsd versions before 0.13 for Perl allow metric injections
- COSIMO Net::Statsd
- Other injection
- CWE-150
- CVSS 5.3 Medium
itsourcecode Fees Management System receipt.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Fees Management System manage_user.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Fees Management System manage_student.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 7.1 High
HCL iControl was affected by Export CSV - CSV Injection vulnerability.
- HCL iControl
- Other injection
- CVSS 6.5 Medium
Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections
- TEAM Net::Async::Statsd::Client
- Other injection
- CWE-150
- CVSS 7.6 High
Froxlor: BIND Zone File Injection via TXT Record Content
- Other injection
<2.3.7 · fixed in 2.3.7
GHSA-37m5-m4q3-fc6x · CVE-2026-41234 - CVSS 1.2 Low
HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens
- Thinkst Applied Research Canarytokens
- Other injection
- CVSS 6.9 Medium
SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection
- SourceCodester Pizzafy E-Commerce System
- Other injection
- SQL injection
- CVSS 5.1 Medium
ahujasid blender-mcp server.py execute_blender_code code injection
- ahujasid blender-mcp
- Other injection
- Code injection
- CVSS 5.3 Medium
ahujasid blender-mcp server.py open injection
- ahujasid blender-mcp
- Other injection
- CWE-707
- CVSS 6.9 Medium
code-projects Student Admission System index.php sql injection
- code-projects Student Admission System
- Other injection
- SQL injection
- CVSS 2.1 Low
CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection
- Other injection
>=0.8.0, <1.18.3 · fixed in 1.18.3
GHSA-q7jx-v53g-848w · CVE-2026-48596 - CVSS 6.9 Medium
DedeCMS carbuyaction.php RemoveXSS sql injection
- DedeCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
DedeCMS flink.php dede_htmlspecialchars sql injection
- DedeCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
DedeCMS Feedback feedback.php TrimMsg sql injection
- DedeCMS
- Other injection
- SQL injection
- CVSS 2.1 Low
CRLF injection in HTTP/1 request line via unvalidated method in Mint
- Other injection
>=0.1.0, <1.9.0 · fixed in 1.9.0
GHSA-2pg6-44cx-c49v · CVE-2026-48861 - CVSS 6.5 Medium
Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks
- Ditec a.s. D.Launcher 2
- Other injection
- Information disclosure
- CVSS 5.3 Medium
itsourcecode Fees Management System manage_payment.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
elunez eladmin Application Deployment App.java command injection
- elunez eladmin
- Other injection
- Command injection
- CVSS 5.3 Medium
transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
- Other injection
- CVSS 5.3 Medium
itsourcecode Fees Management System manage_fee.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Fees Management System manage_course.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Fees Management System ajax.php sql injection
- itsourcecode Fees Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection
- code-projects Hotel and Tourism Reservation System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Payroll System home_employee.php sql injection
- CodeAstro Payroll System
- Other injection
- SQL injection
- CVSS 8.8 High
IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator
- IBM i Access Family
- Other injection
- CVSS 5.3 Medium
itsourcecode Content Management System edit_topic.php sql injection
- itsourcecode Content Management System
- Other injection
- SQL injection