Other injection.

Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection

• Ajaxify Comments
• Other injection

Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter

• Brave
• Other injection

GutenKit < 2.5.1 - Contributor+ Stored CSS Injection

• GutenKit
• Other injection

Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE

• Yoast SEO Premium
• Other injection

LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115

• Drupal LDAP / Active Directory Integration
• Other injection

Template injection in Eclipse Foundation Eclipse Ditto

• Eclipse Foundation Eclipse Ditto
• Other injection
• Code injection

Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`

• Other injection

>=6.5.5, <6.5.8 · fixed in 6.5.8

Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure

• Elastic Kibana
• Other injection

Xinhu Rainrock RockOA index.php toaddval sql injection

• Xinhu Rainrock RockOA
• Other injection
• SQL injection

Chanjet CRM jxf_dump_table.php sql injection

• Chanjet CRM
• Other injection
• SQL injection

Xinhu Rainrock RockOA webmainAction.php getOrder sql injection

• Xinhu Rainrock RockOA
• Other injection
• SQL injection

zhongyu09 OpenChatBI generate_sql.py _validate_sql_safety sql injection

• zhongyu09 OpenChatBI
• Other injection
• SQL injection

ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection

• ICP DAS UA-2200
• ICP DAS UA-5200
• Other injection
• Command injection

MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags

• MW WP Form
• Other injection

Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection

• Cobham SATCOM VSAT7090 Maritime Satellite Router
• Other injection
• Command injection

RedPort Optimizer wXa-223 System Clock datetime.php exec command injection

• RedPort Optimizer wXa-203
• RedPort Optimizer wXa-213
• Other injection
• Command injection

QVidium Opera11 CGI Script net_tr.cgi command injection

• QVidium Opera11
• Other injection
• Command injection

ShopEx ECShop flow.php flow_update_cart sql injection

• ShopEx ECShop
• Other injection
• SQL injection

Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export

• ellite Wallos
• Other injection
• CWE-116

kishan0725 Hospital-Management-System search.php sql injection

• kishan0725 Hospital-Management-System
• Other injection
• SQL injection

code-projects Online Shopping System Search Functionality action.php sql injection

• code-projects Online Shopping System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System inv_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorController.php preview code injection

• yaojingang GEOFlow
• Other injection
• Code injection

Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao.course_ranking sql injection

• Soarkey StudentManagement
• Soarkey 学生信息管理系统
• Other injection
• SQL injection

itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injection

• itsourcecode Online Medicine Delivery System
• Other injection
• SQL injection

itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

• itsourcecode Online Medicine Delivery System
• Other injection
• SQL injection

itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection

• itsourcecode Online Medicine Delivery System
• Other injection
• SQL injection

itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

• itsourcecode Online Medicine Delivery System
• Other injection
• SQL injection

itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injection

• itsourcecode Online Medicine Delivery System
• Other injection
• SQL injection

itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection

• itsourcecode Online Medicine Delivery System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System inv_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

SeaCMS zyapi.php sql injection

• SeaCMS
• Other injection
• SQL injection

SeaCMS Template search.php parseIf code injection

• SeaCMS
• Other injection
• Code injection

TOTOLINK NR1800X cstecgi.cgi setUssd command injection

• TOTOLINK NR1800X
• Other injection
• Command injection

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint.

• Other injection

D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

• D-Link DIR-825M
• Other injection
• Command injection

itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System sup_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

Unescaped backslash allows LIKE wildcard injection in AshSql string search

• Other injection

>=0.1.1-rc.10, <0.7.1 · fixed in 0.7.1

itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System pro_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System emp_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

JSON path injection via unescaped get_path segments in AshSqlite

• Other injection

>=0.1.2-rc.0, <0.2.18 · fixed in 0.2.18

PHPGurukul Student Information System student_edit1.php sql injection

• PHPGurukul Student Information System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System emp_del.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System emp_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

• MongoDB BI Connector Transition Readiness Report
• Other injection

Snipe-IT has CSV formula injection in Activity Report export

• Other injection

<8.6.2 · fixed in 8.6.2

CRLF injection in Open-Xchange GmbH OX Dovecot Pro and others

• Open-Xchange GmbH OX Dovecot Pro
• Open-Xchange GmbH OX Dovecot CE
• Other injection

Tutor LMS <= 4.0.5 - Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters

• themeum Tutor LMS – eLearning and online course solution
• Other injection

aiosmtplib: STARTTLS response injection

• Other injection

<5.1.2 · fixed in 5.1.2

cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing

• yhirose cpp-httplib
• Other injection

RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection

• RooCodeInc Roo-Code
• Other injection
• Code injection

RooCodeInc Roo-Code README File ExecaTerminalProcess code injection

• RooCodeInc Roo-Code
• Other injection
• Code injection

RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection

• RooCodeInc Roo-Code
• Other injection
• Code injection

NoSQL injection via array replacement bypassing update shape validation in driver write path

• MongoDB C# Driver
• Other injection

NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

• MongoDB C# Driver
• Other injection

Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

• MongoDB Rust Driver
• Other injection

Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

• MongoDB libmongocrypt
• Other injection

RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure

• Spring AI
• Other injection