Other injection.

itsourcecode Online Enrollment System login.php sql injection

• itsourcecode Online Enrollment System
• Other injection
• SQL injection

SSCMS DDL SitesAddController.Submit.cs sql injection

• SSCMS
• Other injection
• SQL injection

Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

• Wakyma application web
• Other injection

Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

• Wakyma application web
• Other injection

Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

• Wakyma application web
• Other injection

Tiandy Integrated Management Platform getAuthorityByUserId sql injection

• Tiandy Integrated Management Platform
• Other injection
• SQL injection

vanna-ai vanna Endpoint __init__.py update_sql sql injection

• vanna
• Other injection
• SQL injection

LB-LINK BL-WR9000 set_wifi sub_458754 command injection

• LB-LINK BL-WR9000
• Other injection
• Command injection

itsourcecode Payroll Management System manage_employee.php sql injection

• itsourcecode Payroll Management System
• Other injection
• SQL injection

D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

bazinga012 mcp_code_executor index.ts installDependencies command injection

• bazinga012 mcp_code_executor
• Other injection
• Command injection

hypermodel-labs mcp-server-auto-commit index.ts getGitChanges command injection

• hypermodel-labs mcp-server-auto-commit
• Other injection
• Command injection

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

D-Link DNS-1550-04 wizard_mgr.cgi command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

AvinashBole quip-mcp-server index.ts setupToolHandlers command injection

• AvinashBole quip-mcp-server
• Other injection
• Command injection

JawherKl node-api-postgres user.js User.getAll sql injection

• JawherKl node-api-postgres
• Other injection
• SQL injection

phpipam Section edit-result.php sql injection

• phpipam
• Other injection
• SQL injection

CodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection

• CodePhiliaX Chat2DB
• Other injection
• SQL injection

Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection

• Wavlink WL-WN578W2
• Other injection
• Command injection

Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection

• Wavlink WL-WN579A3
• Other injection
• Command injection

Pigeon has a Host Header Injection in email verification flow

• kasuganosoras Pigeon
• Other injection

Undici has CRLF Injection in undici via `upgrade` option

• Other injection

<6.24.0 || >=7.0.0, <7.24.0 · fixed in 6.24.0, 7.24.0

tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling

• Python Software Foundation CPython
• Other injection
• Unrestricted file upload

Parse Server: Account takeover via operator injection in authentication data identifier

• Other injection

<8.6.38 || >=9.0.0, <9.6.0-alpha.12 · fixed in 8.6.38, 9.6.0-alpha.12

Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

• Other injection

<0.28.2 · fixed in 0.28.2

OliveTin's email argument makes compliance harder, enables log injection

• Other injection
• Information disclosure

<3000.11.3 · fixed in 3000.11.3

Duplicate Advisory: OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

• Other injection

<2026.2.21 · fixed in 2026.2.21

Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Other injection

itsourcecode Cafe Reservation System Registration signup.php sql injection

• itsourcecode Cafe Reservation System
• Other injection
• SQL injection

CodeGenieApp serverless-express Users Endpoint dynamodb.ts injection

• CodeGenieApp serverless-express
• Other injection
• CWE-707

itsourcecode Online Doctor Appointment System doctor_action.php sql injection

• itsourcecode Online Doctor Appointment System
• Other injection
• SQL injection

itsourcecode Online Doctor Appointment System patient_action.php sql injection

• itsourcecode Online Doctor Appointment System
• Other injection
• SQL injection

FeMiner wms Basic Organizational Structure depart_add_bg.php sql injection

• FeMiner wms
• Other injection
• SQL injection

AutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection

• AutohomeCorp frostmourne
• Other injection
• Code injection

xierongwkhd weimai-wetapp Endpoint HomeController.java getLikeMovieList sql injection

• xierongwkhd weimai-wetapp
• Other injection
• SQL injection

xierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins sql injection

• xierongwkhd weimai-wetapp
• Other injection
• SQL injection

elecV2P jsfile Endpoint wbjs.js runJSFile code injection

• elecV2P
• Other injection
• Code injection

Improper Neutralization of CRLF Sequences ('CRLF Injection') in GitLab

• GitLab
• Other injection

Traefik: kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values

• Other injection

<=1.7.34 · no fixed version yet

itsourcecode University Management System att_add.php sql injection

• itsourcecode University Management System
• Other injection
• SQL injection

H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection

• H3C ACG1000-AK230
• Other injection
• Command injection

Parse Server vulnerable to LDAP injection via unsanitized user input in DN and group filter construction

• Other injection

<8.6.26 || >=9.0.0-alpha.1, <9.5.2-alpha.13 · fixed in 8.6.26, 9.5.2-alpha.13

Parse Server has a NoSQL injection via token type in password reset and email verification endpoints

• Other injection

<8.6.14 || >=9.0.0, <9.5.2-alpha.1 · fixed in 8.6.14, 9.5.2-alpha.1

Sylius has a DQL Injection via API Order Filters

• SQL injection
• Other injection

<1.9.12 || >=1.10.0, <1.10.16 || >=1.11.0, <1.11.17 || >=1.12.0, <1.12.23 || >=1.13.0, <1.13.15 || >=1.14.0, <1.14.18 || >=2.0.0, <2.0.16 || >=2.1.0, <2.1.12 || >=2.2.0, <2.2.3 · fixed in 1.9.12, 1.10.16, 1.11.17, 1.12.23, 1.13.15, 1.14.18, 2.0.16, 2.1.12, 2.2.3

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

• Other injection

>=5.0.0, <5.0.42 · fixed in 5.0.42

Budibase Universal Auth Bypass via Webhook Query Param Injection

• budibase
• Other injection

Tiandy Easy7 CMS Windows GetDBData.jsp sql injection

• Tiandy Easy7 CMS Windows
• Other injection
• SQL injection

opencc JFlow WF_CCForm.java Calculate injection

• opencc JFlow
• Other injection
• CWE-707

SourceCodester/janobe Resort Reservation System room_rates.php sql injection

• SourceCodester Resort Reservation System
• janobe Resort Reservation System
• Other injection
• SQL injection

Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection

• Comfast CF-AC100
• Other injection
• Command injection

SourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System Search dashboard.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection