Other injection.

morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

• Other injection

<1.12.1 · fixed in 1.12.1

Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

• Ziroom ZHOME A0101
• Other injection
• Command injection

Eleveo Call Recording Software User Management userAddAction.do ldap injection

• Eleveo Call Recording Software
• Other injection

code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

• code-projects Matrimonial System
• Other injection
• SQL injection

Apache Karaf: LDAP filter injection in JAAS LDAP login modules

• Apache Software Foundation Apache Karaf
• Other injection

dayrui XunruiCMS Group Editing Home.php group_all_edit sql injection

• dayrui XunruiCMS
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project makeresult.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

aaPanel BaoTa Domain domainMod.py get_domain_status sql injection

• aaPanel BaoTa
• Other injection
• SQL injection

aaPanel BaoTa data.py getData sql injection

• aaPanel BaoTa
• Other injection
• SQL injection

aaPanel BaoTa File Merge files.py merge_split_file command injection

• aaPanel BaoTa
• Other injection
• Command injection

DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection

• DevaslanPHP project-management
• Other injection
• SQL injection

DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection

• DevaslanPHP project-management
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection

• amirsanni Mini-Inventory-and-Sales-Management-System
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

froxlor before 2.3.12 CRLF Injection via validateUrl userinfo

• froxlor
• Other injection

Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection

• parse-community parse-server
• Other injection

mathurvishal CloudClassroom-PHP-Project mydetailsfaculty.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project updatedetailsfromstudent.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

• OpenClaw
• Other injection

OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels

• OpenClaw
• Other injection

GLPI: LDAP filter injection in user import feature

• glpi
• Other injection

mathurvishal CloudClassroom-PHP-Project managevideos2.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

• GNOME NetworkManager-vpnc
• Other injection

Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

• GNOME NetworkManager-vpnc
• Other injection

Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials

• GNOME NetworkManager-fortisslvpn
• Other injection

mathurvishal CloudClassroom-PHP-Project updatefaculty.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project Student Update Functionality updatestudent.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project updatequery.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project Faculty Authentication loginlinkfaculty.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

RabbitMQ: LDAP DN injection via unescaped substitution

• rabbitmq-server
• Other injection

Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection

• Zhonglun CloudPos
• Other injection
• Code injection

InvoicePlane: Log Injection via Unsanitized User Input in Cron Key Error Logging

• InvoicePlane
• Other injection

Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell

• Kovid Goyal kitty
• Other injection

Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup

• Rapid7 Platform
• Other injection

zbateson/mail-mime-parser has CRLF header injection via attachment filename

• Other injection

<3.0.6 || >=4.0.0, <4.0.2 · fixed in 3.0.6, 4.0.2

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

• Other injection

<1.1.17 · fixed in 1.1.17

YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection

• YunaiV ruoyi-vue-pro
• zhijiantianya ruoyi-vue-pro
• Other injection
• SQL injection

Discourse: Escape LIKE metacharacters in upload paths to prevent disclosure

• discourse
• Other injection

Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel

• Laravel MongoDB (PHP)
• Other injection

DbGate JSON Runner runners.js code injection

• DbGate
• Other injection
• Code injection

java110 MicroCommunity fallBack API Endpoint BusinessApi.java QueryServiceSMOImpl.fallBack sql injection

• java110 MicroCommunity
• Other injection
• SQL injection

Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

• Forma LMS
• Other injection
• SQL injection

pmTicket Project-Management-Software add_project.php setSync sql injection

• pmTicket Project-Management-Software
• Other injection
• SQL injection

SoftNews Media Group DataLife Engine Search search.php strip_data sql injection

• SoftNews Media Group DataLife Engine
• Other injection
• SQL injection

Abdurrab5 online-makeup-store Customer Login customerSignin.php sql injection

• Abdurrab5 online-makeup-store
• Other injection
• SQL injection

Abdurrab5 online-makeup-store Admin Login index.php sql injection

• Abdurrab5 online-makeup-store
• Other injection
• SQL injection

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

• Other injection
• CWE-150

<1.3.4 · fixed in 1.3.4

Neethuharii CafeManagement Login CafePortalLogin.php sql injection

• Neethuharii CafeManagement
• Other injection
• SQL injection

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Other injection

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Other injection

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Other injection

XML Injection vulnerability

• Zohocorp ManageEngine OpManager
• ZohoCorp ManageEngine Firewall Analyzer
• Other injection

Ninja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data Source

• Ninja Tables
• Other injection

GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translation

• GTranslate
• Other injection

WP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment Content

• WP Recipe Maker
• Other injection