Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
EasyCMS Request Parameter RbacuserAction.class.php sql injection
- EasyCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
EasyCMS Request Parameter RbacnodeAction.class.php sql injection
- EasyCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester/janobe Resort Reservation System accomodation.php sql injection
- SourceCodester Resort Reservation System
- janobe Resort Reservation System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode sanitize or validate this input teacher-attendance.php sql injection
- itsourcecode sanitize or validate this input
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode University Management System att_single_view.php sql injection
- itsourcecode University Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode University Management System view_result.php sql injection
- itsourcecode University Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
projectworlds Online Art Gallery Shop adminHome.php sql injection
- projectworlds Online Art Gallery Shop
- Other injection
- SQL injection
- CVSS 6.9 Medium
projectworlds Online Art Gallery Shop adminHome.php sql injection
- projectworlds Online Art Gallery Shop
- Other injection
- SQL injection
- CVSS 6.9 Medium
projectworlds Online Art Gallery Shop pass sql injection
- projectworlds Online Art Gallery Shop
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System check_item_details.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System POST check_customer_details.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System add_stock.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System add_sales_print.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injection
- SourceCodester Employee Task Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injection
- SourceCodester Employee Task Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode University Management System add_result.php sql injection
- itsourcecode University Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Simple Responsive Tourism Website Login Login.php sql injection
- SourceCodester Simple Responsive Tourism Website
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Student Web Portal profile.php sql injection
- code-projects Student Web Portal
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Student Web Portal signup.php valreg_passwdation sql injection
- code-projects Student Web Portal
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode University Management System admin_search_student.php sql injection
- itsourcecode University Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Free Hotel Reservation System index.php sql injection
- itsourcecode Free Hotel Reservation System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Flight Ticket Booking System Admindelete.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 5.1 Medium
code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 5.1 Medium
code-projects Simple Flight Ticket Booking System Adminadd.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Flight Ticket Booking System register.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Flight Ticket Booking System login.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection
- code-projects Simple Flight Ticket Booking System
- Other injection
- SQL injection
- CVSS 5.1 Medium
Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection
- Wavlink NU516U1
- Other injection
- Command injection
- CVSS 5.3 Medium
welovemedia FFmate ffmpeg.go Execute argument injection
- welovemedia FFmate
- Other injection
- Command injection
- CVSS 5.3 Medium
RyuzakiShinji biome-mcp-server biome-mcp-server.ts command injection
- RyuzakiShinji biome-mcp-server
- Other injection
- Command injection
- CVSS 5.3 Medium
JeecgBoot getDictItems isExistSqlInjectKeyword sql injection
- JeecgBoot
- Other injection
- SQL injection
- CVSS 5.1 Medium
Wavlink WL-NU516U1 adm.cgi usb_p910 command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
- CVSS 5.1 Medium
Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
- CVSS 6.5 Medium
Apache ZooKeeper has improper handling of configuration values
- Other injection
- Information disclosure
>=3.9.0, <3.9.5 || >=3.8.0, <3.8.6 · fixed in 3.9.5, 3.8.6
GHSA-crhr-qqj8-rpxc · CVE-2026-24308 - CVSS 5.5 Medium
Caddy's vars_regexp double-expands user input, leaking env vars and files
- Other injection
- Information disclosure
>=2.7.5, <2.11.2 · fixed in 2.11.2
GHSA-m2w3-8f23-hxxf · CVE-2026-30852 - CVSS 6.9 Medium
Rocket.Chat: NoSQL injection in the EE ddp-streamer-service
- RocketChat Rocket.Chat
- Other injection
- CVSS 9.2 CriticalCritical · CVSS 9+
TinyWeb: HTTP Header Control Character Injection into CGI Environment
- maximmasiutin TinyWeb
- Other injection
- CWE-20
- CVSS 5.3 Medium
DefaultFuction Jeson Customer Relationship Management System edit.php sql injection
- DefaultFuction Jeson Customer Relationship Management System
- Other injection
- SQL injection
- CVSS 8.6 HighCritical · CVSS 7+ and EPSS
Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
- CVSS 6.9 Medium
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
- Other injection
<4.15.1 · fixed in 4.15.1
GHSA-g7hc-96xr-gvvx · CVE-2026-30227 - CVSS 9.3 CriticalCritical · CVSS 9+
@perfood/couch-auth has a host header injection vulnerability
- Other injection
- CWE-644
<=0.26.0 · no fixed version yet
GHSA-qw8v-34ww-6q9p · CVE-2025-70948 - CVSS 7.7 High
TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
- Other injection
- Unrestricted file upload
<1.14.3 · fixed in 1.14.3
GHSA-928r-fm4v-mvrw · CVE-2026-29186 - CVSS 6.3 Medium
OnDemand susceptible to malicious input when navigating to a directory.
- OSC ondemand
- Other injection
- CVSS 8.5 High
LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl
- langchain-ai helm
- Other injection
- CVSS 5.4 Medium
Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie()
- Other injection
- CWE-1113
<4.12.4 · fixed in 4.12.4
GHSA-5pq2-9x2x-5p6w · CVE-2026-29086 - CVSS 6.5 Medium
Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE()
- Other injection
<4.12.4 · fixed in 4.12.4
GHSA-p6xx-57qc-3wxr · CVE-2026-29085 - CVSS 6.9 Medium
Log Pollution - Control Characters Not Escaped
- 2N Telekomunikace a.s. 2N Access Commander
- Other injection
- CVSS 5.3 Medium
XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101
- International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management interface
- Other injection
- CVSS 5.1 Medium
itsourcecode College Management System class-result.php sql injection
- itsourcecode College Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
MCP NMAP Server has an Injection vulnerability
- Other injection
- Command injection
<=1.0.1 · no fixed version yet
GHSA-xc68-rrqc-qgq3 · CVE-2026-3484 - CVSS 5.1 Medium
itsourcecode College Management System student-fee.php sql injection
- itsourcecode College Management System
- Other injection
- SQL injection
- CVSS 7.7 High
Ghost Vulnerable to Remote Code Execution via Malicious Themes
- Other injection
>=0.7.2, <6.19.1 · fixed in 6.19.1
GHSA-cgc2-rcrh-qr5x · CVE-2026-29053 - CVSS 6.9 Medium
itsourcecode University Management System admin_single_student.php sql injection
- itsourcecode University Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode University Management System admin_single_student_update.php sql injection
- itsourcecode University Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Society Management System check_studid.php sql injection
- itsourcecode Society Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection
- eosphoros-ai db-gpt
- Other injection
- Code injection
- CVSS 6.9 Medium
projectworlds Online Art Gallery Shop Registration registration.php sql injection
- projectworlds Online Art Gallery Shop
- Other injection
- SQL injection