Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
SourceCodester Online Library Management System Parameter home.php sql injection
- SourceCodester Online Library Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Catering Reservation search.php sql injection
- SourceCodester Online Catering Reservation
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode sanitize or validate this input Parameter subjects.php sql injection
- itsourcecode sanitize or validate this input
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester E-Commerce Site products.php sql injection
- SourceCodester E-Commerce Site
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Free Hotel Reservation System Parameter index.php sql injection
- itsourcecode Free Hotel Reservation System
- Other injection
- SQL injection
- CVSS 6.6 Medium
Rails Active Storage has possible glob injection in its DiskService
- Other injection
<7.2.3.1 || >=8.0.0.beta1, <8.0.4.1 || >=8.1.0.beta1, <8.1.2.1 · fixed in 7.2.3.1, 8.0.4.1, 8.1.2.1
GHSA-73f9-jhhh-hr5m · CVE-2026-33202 - CVSS 5.3 Medium
648540858 wvp-GB28181-pro Stream Proxy Query StreamProxyProvider.java selectAll sql injection
- 648540858 wvp-GB28181-pro
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Laundry System Parameters checklogin.php sql injection
- code-projects Simple Laundry System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Laundry System Parameters checkupdatestatus.php sql injection
- code-projects Simple Laundry System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple Laundry System Parameters viewdetail.php sql injection
- code-projects Simple Laundry System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Simple E-learning System User Profile Update sql injection
- SourceCodester Simple E-learning System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Simple E-learning System HTTP GET Parameter delete_post.php sql injection
- SourceCodester Simple E-learning System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System HTTP POST Request view_product.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection
- SourceCodester Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.1 Medium
yangzongzhuan RuoYi Quartz Job job code injection
- yangzongzhuan RuoYi
- Other injection
- Code injection
- CVSS 5.3 Medium
Tenda F453 WriteFacMac FormWriteFacMac privilege escalation
- Tenda F453
- Other injection
- Command injection
- CVSS 5.1 Medium
code-projects Simple Gym Management System func.php sql injection
- code-projects Simple Gym Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Wavlink WL-WN578W2 POST Request firewall.cgi command injection
- Wavlink WL-WN578W2
- Other injection
- Command injection
- CVSS 6.9 Medium
projectworlds Online Notes Sharing System Parameters login.php sql injection
- projectworlds Online Notes Sharing System
- Other injection
- SQL injection
- CVSS 5.1 Medium
Cudy TR1200 ipsec.lua action_ipsec_conn command injection
- Cudy TR1200
- Other injection
- Command injection
- CVSS 5.3 Medium
code-projects Simple Food Ordering System all-tickets.php sql injection
- code-projects Simple Food Ordering System
- Other injection
- SQL injection
- CVSS 4.8 Medium
apconw Aix-DB terminology_retriever.py sql injection
- apconw Aix-DB
- Other injection
- SQL injection
- CVSS 5.3 Medium
Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection
- Foundation Agents MetaGPT
- Other injection
- CWE-707
- CVSS 5.3 Medium
Foundation Agents MetaGPT operator.py code_generate code injection
- Foundation Agents MetaGPT
- Other injection
- Code injection
- CVSS 5.3 Medium
vanna-ai vanna base.py ask sql injection
- vanna
- Other injection
- SQL injection
- CVSS 5.3 Medium
vanna-ai vanna legacy exec injection
- vanna
- Other injection
- CWE-707
- CVSS 5.3 Medium
MindSQL is vulnerable to Code Injection through its ask_db function
- Other injection
- Code injection
<=0.2.1 · no fixed version yet
GHSA-m6m4-34cj-4hh7 · CVE-2026-4506 - CVSS 6.9 Medium
PbootCMS Member Login MemberController.php checkUsername sql injection
- PbootCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
Mindinventory MindSQL mindsql_core.py ask_db sql injection
- Mindinventory MindSQL
- Other injection
- SQL injection
- CVSS 6.9 Medium
h3: SSE Event Injection via Unsanitized Carriage Return (`\r`) in EventStream Data and Comment Fields (Bypass of CVE Fix)
- Other injection
<1.15.9 || >=2.0.0-beta.0, <2.0.1-rc.17 · fixed in 1.15.9, 2.0.1-rc.17
GHSA-4hxc-9384-m385 · CVE-2026-86252 - CVSS 6.9 Medium
eosphoros-ai db-gpt Incomplete Fix editor sql injection
- eosphoros-ai db-gpt
- Other injection
- SQL injection
- CVSS 5.3 Medium
bagofwords1 bagofwords code_execution.py generate_df injection
- bagofwords
- Other injection
- CWE-707
- CVSS 5.3 Medium
itsourcecode College Management System search_student.php sql injection
- itsourcecode College Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
itsourcecode Online Doctor Appointment System appointment_action.php sql injection
- itsourcecode Online Doctor Appointment System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection
- itsourcecode Online Frozen Foods Ordering System
- Other injection
- SQL injection
- CVSS 5.1 Medium
itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injection
- itsourcecode Online Frozen Foods Ordering System
- Other injection
- SQL injection
- CVSS 5.1 Medium
itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection
- itsourcecode Online Frozen Foods Ordering System
- Other injection
- SQL injection
- CVSS 5.1 Medium
itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injection
- itsourcecode Online Frozen Foods Ordering System
- Other injection
- SQL injection
- CVSS 5.1 Medium
Comfast CF-AC100 mbox-config command injection
- Comfast CF-AC100
- Other injection
- Command injection
- CVSS 5.1 Medium
Comfast CF-AC100 mbox-config command injection
- Comfast CF-AC100
- Other injection
- Command injection
- CVSS 5.1 Medium
Comfast CF-AC100 mbox-config command injection
- Comfast CF-AC100
- Other injection
- Command injection
- CVSS 8.8 High
SuiterCRM has LDAP Filter Injection in Authentication Module
- SuiteCRM
- Other injection
- CVSS 1.8 Low
OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation
- openwrt
- Other injection
- Privilege escalation
- CVSS 8.6 High
SQLBot: Remote Code Execution via Terminology Poisoning
- dataease SQLBot
- Other injection
- Command injection
- CVSS 7.7 High
Ubiquiti Inc UniFi Network Application: An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could…
- Ubiquiti Inc UniFi Network Application
- Other injection
- CVSS 7.5 High
h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields
- Other injection
<1.15.6 || >=2.0.0, <2.0.1-rc.15 · fixed in 1.15.6, 2.0.1-rc.15
GHSA-22cc-p3c6-wpvm · CVE-2026-33128 - CVSS 6.9 Medium
code-projects Simple Food Order System add-item.php sql injection
- code-projects Simple Food Order System
- Other injection
- SQL injection
- CVSS 3.9 Low
Libsoup: libsoup: header and http request injection via crlf injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Other injection
- CVSS 3.9 Low
Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Other injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 6.9 Medium
Vanna has a SQL injection in the remove_training_data function
- Other injection
- SQL injection
<=2.0.2 · no fixed version yet
GHSA-6mj8-jmp2-g8q7 · CVE-2026-4229 - CVSS 5.3 Medium
itsourcecode College Management System time-table.php sql injection
- itsourcecode College Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
itsourcecode College Management System courses.php sql injection
- itsourcecode College Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Free Hotel Reservation System index.php sql injection
- itsourcecode Free Hotel Reservation System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online Enrollment System index.php sql injection
- itsourcecode Online Enrollment System
- Other injection
- SQL injection