Other injection.

Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection

• Fengoffice Feng Office
• Other injection
• SQL injection

Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection

• Fengoffice Feng Office
• Other injection
• SQL injection

sanjevirau gsubs Electron index.js showQuerySuccessPage code injection

• sanjevirau gsubs
• Other injection
• Code injection

Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection

• Xuxueli xxl-job
• Other injection
• Code injection

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

• Other injection

<0.84.0 · fixed in 0.84.0

WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php

• WWBN AVideo
• Other injection

WWBN AVideo CSV Formula Injection via myComments.download.php

• WWBN AVideo
• Other injection

MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To

• MetForm
• Other injection

Simple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field Repopulation

• Simple CAPTCHA with Cloudflare Turnstile
• Other injection

IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data

• IBM webMethods Integration Server
• Other injection

Duplicate Advisory: pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

• Other injection

<=4.18.0 · no fixed version yet

Duplicate Advisory: GridFS data disclosure and deletion via query-operator injection in file IDs

• Other injection

>=1.1.0 · no fixed version yet

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver

• MongoDB C Driver
• Other injection

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver

• MongoDB C++ Driver
• Other injection

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver

• MongoDB Java Driver
• Other injection

GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver

• MongoDB Go Driver
• Other injection

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

• MongoDB Ruby Driver
• Other injection

Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel

• Laravel MongoDB (PHP)
• Other injection

Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel

• Laravel MongoDB (PHP)
• Other injection

Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

• MongoDB C# Driver
• Other injection

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver

• MongoDB C# Driver
• Other injection

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver

• MongoDB Rust Driver
• Other injection

Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel

• Laravel MongoDB (PHP)
• Other injection

cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

• cookies
• Other injection

Rizwan17 inventory-management-system manage.php storeCustomerOrderInvoice sql injection

• Rizwan17 inventory-management-system
• Other injection
• SQL injection

Rizwan17 inventory-management-system manage.php update_record sql injection

• Rizwan17 inventory-management-system
• Other injection
• SQL injection

Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export

• grokability snipe-it
• Other injection

Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report

• grokability snipe-it
• Other injection

CSV injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Other injection

LDAP injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Other injection

Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation

• Contact Form 7 Captcha
• Other injection

Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders

• Hustle
• Other injection

Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment Text

• CleanTalk
• Other injection

Injection in Google Chrome

• Google Chrome
• Other injection

morgan vulnerable to Log Forging via unescaped Unicode line separators

• Other injection

<1.12.0 · fixed in 1.12.0

mongodb: Reject "." and NUL bytes in database and collection names

• Other injection

<1.21.4 || >=2.0.0, <2.4.1 · fixed in 1.21.4, 2.4.1

xmldom: Processing Instruction Target Injection Bypasses requireWellFormed

• Other injection

<=0.6.0 · no fixed version yet

xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator

• Other injection
• CWE-625

>=0.9.11, <0.9.12 · fixed in 0.9.12

xmldom: DocType `name` Injection Bypasses requireWellFormed

• Other injection

<=0.6.0 · no fixed version yet

xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path

• Other injection
• CWE-625

>=0.9.0, <0.9.12 · fixed in 0.9.12

xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator

• Other injection
• CWE-625

>=0.9.10, <0.9.12 · fixed in 0.9.12

Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections

• Other injection

>=3.0.0-RC1, <3.3.0 · fixed in 3.3.0

CakePHP: SmtpTransport vulnerable to CRLF header injection

• Other injection

>=4.5.0, <4.5.12 || >=4.6.0, <4.6.5 || >=5.0.0, <5.1.9 || >=5.2.0, <5.2.14 || >=5.3.0, <5.3.7 · fixed in 4.5.12, 4.6.5, 5.1.9, 5.2.14, 5.3.7

HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers

• Other injection

<2.11.0 · fixed in 2.11.0

xmldom: Element name injection via createElement() bypasses requireWellFormed

• Other injection

<=0.6.0 · no fixed version yet

xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed

• Other injection

<=0.6.0 · no fixed version yet

Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation

• Okta Access Gateway
• Other injection

itsourcecode Sales and Inventory System us_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

Microsoft SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server Management Studio 22
• Other injection

aircheng-org iWebShop-5 member.php member_list sql injection

• aircheng-org iWebShop-5
• Other injection
• SQL injection

Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

• MongoDB Server
• Other injection

code-projects Student Crud Operation edit.php sql injection

• code-projects Student Crud Operation
• Other injection
• SQL injection

itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System cust_edit1.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System pro_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System delete_subject.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

• D-Link DIR-895L
• Other injection
• Command injection

itsourcecode Sales and Inventory System us_edit1.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Online Voting System ajax.php save_category sql injection

• SourceCodester Online Voting System
• Other injection
• SQL injection

jaychouchannel Tourism-Management-System CommonDao CommonController.java sql injection

• jaychouchannel Tourism-Management-System
• Other injection
• SQL injection