Other injection.

iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

• iFlytek astron-agent
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System exam-delete.php sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php update sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php update sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php add sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection

• AdithyaYelloju Restaurant-Management-System
• Other injection
• SQL injection

itsourcecode Leave Management System index.php sql injection

• itsourcecode Leave Management System
• Other injection
• SQL injection

TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection

• TDuckCloud tduck-platform
• Other injection
• SQL injection

anirbandutta9 College-Notes-Gallery login.php sql injection

• anirbandutta9 College-Notes-Gallery
• Other injection
• SQL injection

MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths

• MISP
• Other injection
• Insecure deserialization

mtrano APENCMS Template weasel.php eval code injection

• mtrano APENCMS
• Other injection
• Code injection

XML injection in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Other injection

Livestatus injection via monitoring filter values

• Checkmk
• Other injection

Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array

• Other injection

Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection

• Yonyou U8cloud
• Other injection
• SQL injection

Yonyou KSOA search_list.jsp sql injection

• Yonyou KSOA
• Other injection
• SQL injection

luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries

• openwrt luci-app-adblock-fast
• Other injection

ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

• ST Engineering iDirect iDX
• ST Engineering iDirect Evo iDX
• Other injection

GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name

• GiveWP
• Other injection

drogonframework drogon ORM Criteria.cc makeCriteria sql injection

• drogon
• Other injection
• SQL injection

drogonframework drogon ORM Mapper Mapper.h orderBy sql injection

• drogon
• Other injection
• SQL injection

Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection

• Chengdu Feiyuxing Technology Feiyu Star Router
• Other injection
• Command injection

Chengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection

• Chengdu Feiyuxing Technology Feiyu Star Router
• Other injection
• Command injection

QCMS Content Detail Controllers.php self_Tmp sql injection

• QCMS
• Other injection
• SQL injection

RooCMS Frontend Rendering site_pagePHP.php eval code injection

• RooCMS
• Other injection
• Code injection

Netcore NBR200V2 Backup Restore restore.cgi command injection

• Netcore NBR200V2
• Other injection
• Command injection

Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection

• Netcore NBR200V2
• Other injection
• Command injection

Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection

• Netcore NBR200V2
• Other injection
• Command injection

Netcore NBR200V2 LAN IP Configuration network_tools command injection

• Netcore NBR200V2
• Other injection
• Command injection

Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

• Netcore NBR200V2
• Other injection
• Command injection

AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

• AdithyaYelloju Restaurant Management System
• Other injection
• SQL injection

AdithyaYelloju Restaurant-Management-System add_menu.php sql injection

• AdithyaYelloju Restaurant-Management-System
• Other injection
• SQL injection

itsourcecode Leave Management System index.php sql injection

• itsourcecode Leave Management System
• Other injection
• SQL injection

0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection

• 0-Gaurav-0 nexus-mcp
• Other injection
• Command injection

SourceCodester Drug Recommendation System edit_user.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

DedeCMS mytag_js.php code injection

• DedeCMS
• Other injection
• Code injection

SourceCodester Drug Recommendation System edit_symptom.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

code-projects Internship Management System Admin Login Form login.php sql injection

• code-projects Internship Management System
• Other injection
• SQL injection

code-projects Internship Management System login.php sql injection

• code-projects Internship Management System
• Other injection
• SQL injection

code-projects Internship Management System login.php sql injection

• code-projects Internship Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

aiyiyi121 SxDevOps Command services.py generate_host_task command injection

• aiyiyi121 SxDevOps
• Other injection
• Command injection

aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection

• aiyiyi121 SxDevOps
• Other injection
• Command injection

aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

• aiyiyi121 SxDevOps
• Other injection
• Command injection

itsourcecode Leave Management System controller.php sql injection

• itsourcecode Leave Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

CRLF injection in Exim

• Exim
• Other injection

Totolink A3002MU formWsc command injection

• Totolink A3002MU
• Other injection
• Command injection

WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection

• opajaap WP Photo Album Plus
• Other injection

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

• IBM WebSphere Application Server
• Other injection

NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard

• MongoDB Inc. Mongoid
• Other injection

Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419)

• Red Hat build of Apache Camel for Spring Boot 4
• Red Hat Fuse 7
• Other injection

CRLF injection in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• Other injection

CRLF injection in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• Other injection

marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

• marcopiovanello yt-dlp-web-ui
• Other injection
• Command injection

Azure Cosmos DB Elevation of Privilege Vulnerability

• Microsoft Azure Cosmos DB
• Other injection

code-projects Matrimonial System partner_preference.php writepartnerprefs sql injection

• code-projects Matrimonial System
• Other injection
• SQL injection

MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution

• misp
• Other injection
• CWE-20