Other injection.

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings

• Other injection
• Cross-site scripting (XSS)

<2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2

LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

• Other injection

<0.3.0 · fixed in 0.3.0

Tenda CH22 formcreateFileName command injection

• Tenda CH22
• Other injection
• Command injection

itsourcecode Hospital Management System viewappointmentpending.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

CodeAstro Apartment Visitor Management System password-recovery.php sql injection

• CodeAstro Apartment Visitor Management System
• Other injection
• SQL injection

CodeAstro Apartment Visitor Management System forgotpw.php sql injection

• CodeAstro Apartment Visitor Management System
• Other injection
• SQL injection

Comfast CF-N1-S mbox-config sprintf command injection

• Comfast CF-N1-S
• Other injection
• Command injection

SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System view_order.php sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

GreyDGL PentestGPT Web-Page Crawling injection

• GreyDGL PentestGPT
• Other injection
• CWE-707

itsourcecode Hospital Management System viewappointmentapproved.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

code-projects Simple Inventory System delete.php sql injection

• code-projects Simple Inventory System
• Other injection
• SQL injection

n8n before 1.123.69 NoSQL Injection via MongoDB Node

• n8n
• Other injection

amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection

• amirsanni Mini-Inventory-and-Sales-Management-System
• Other injection
• SQL injection

DeDeCMS advancedsearch.php sql injection

• DeDeCMS
• Other injection
• SQL injection

code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

• code-projects Employee Management System
• Other injection
• SQL injection

code-projects Assessment Management welcome.php sql injection

• code-projects Assessment Management
• Other injection
• SQL injection

chenhg5 cc-connect webhook.go authenticate code injection

• chenhg5 cc-connect
• Other injection
• Code injection

TRENDnet TEW-755AP ssi email.cgi log_email_server command injection

• TRENDnet TEW-755AP
• Other injection
• Command injection

Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR

• AD LDAP app for Splunk SOAR
• Other injection

Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR

• Splunk SOAR
• Other injection

Structured Query Language Injection through the REST API in Splunk SOAR

• Splunk SOAR
• Other injection

SPL Injection through Splunk Web Form Tokens in Splunk Enterprise

• Splunk Enterprise
• Other injection

SPL Injection through the REST API in Splunk Enterprise

• Splunk Enterprise
• Other injection

SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise

• Splunk Enterprise
• Other injection

SPL Injection through Splunk Web in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Other injection

SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise

• Splunk Enterprise
• Other injection

Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise

• Splunk Enterprise
• Other injection

SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Other injection

TRENDnet TV-IP751WIC alphapd set_time.cgi command injection

• TRENDnet TV-IP751WIC
• Other injection
• Command injection

TRENDnet TEW-821DAP ssi ping.cgi system command injection

• TRENDnet TEW-821DAP
• Other injection
• Command injection

code-projects Hospital Information System User Login UsersController.php login sql injection

• code-projects Hospital Information System
• Other injection
• SQL injection

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

• Other injection
• Information disclosure

<1.2.4 · fixed in 1.2.4

Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username

• wazuh
• Other injection

Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities

• Cisco Secure Workload
• Other injection

SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php login sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

code-projects Online Job Portal System Password Recovery ForPass.php sql injection

• code-projects Online Job Portal System
• Other injection
• SQL injection

TRENDnet Router ping.cgi command injection

• TRENDnet Router
• Other injection
• Command injection

TRENDnet TEW-823DRU admin.cgi command injection

• TRENDnet TEW-823DRU
• Other injection
• Command injection

Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields

• Other injection
• CWE-20

<2.3.8 · fixed in 2.3.8

MeshCentral has unsanitized data fields

• Other injection
• CWE-20

<1.1.60 · fixed in 1.1.60

xianrendzw EasyReport Move Operations ModuleController.java sql injection

• xianrendzw EasyReport
• Other injection
• SQL injection

Forem: Stored XSS in Admin Abuse Report Rendering

• forem
• Other injection
• Cross-site scripting (XSS)

ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests

• fbeta-GmbH ePA3-Service-OpenSource
• Other injection

Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

• Joomla! Project Joomla! CMS
• Other injection

Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2

• Joomla! Project Joomla! CMS
• Other injection

MyBB: Email User CRLF injection

• mybb
• Other injection

CVE-2026-19501

• SureForms
• Other injection

code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

• code-projects Task Management System
• Other injection
• SQL injection

PHPGurukul Complaint Management System check_availability.php sql injection

• PHPGurukul Complaint Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewbilling.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewdepartment.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewroom.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

Webkul Bagisto Customer-Registration Notification Email register cross site scripting

• Webkul Bagisto
• Other injection
• Cross-site scripting (XSS)

SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System edit_subject2.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection

• SourceCodester Pet Grooming Management Software
• Other injection
• SQL injection