Other injection.

Totolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection

• Totolink A3300R
• Other injection
• Command injection

Totolink A3300R Parameter cstecgi.cgi setLanCfg command injection

• Totolink A3300R
• Other injection
• Command injection

code-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection

• code-projects Chamber of Commerce Membership Management System
• Other injection
• Command injection

code-projects Accounting System Parameter view_work.php sql injection

• code-projects Accounting System
• Other injection
• SQL injection

code-projects Accounting System Parameter edit_costumer.php sql injection

• code-projects Accounting System
• Other injection
• SQL injection

code-projects Accounting System Parameter view_costumer.php sql injection

• code-projects Accounting System
• Other injection
• SQL injection

Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection

• Totolink NR1800X
• Other injection
• Command injection

Totolink A3600R Parameter cstecgi.cgi setNoticeCfg command injection

• Totolink A3600R
• Other injection
• Command injection

code-projects Simple Food Order System Parameter all-orders.php sql injection

• code-projects Simple Food Order System
• Other injection
• SQL injection

code-projects Simple Food Order System Parameter register-router.php sql injection

• code-projects Simple Food Order System
• Other injection
• SQL injection

code-projects Simple Food Order System Parameter all-tickets.php sql injection

• code-projects Simple Food Order System
• Other injection
• SQL injection

elecV2 elecV2P JSON webhook runJSFile code injection

• elecV2P
• Other injection
• Code injection

PromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection

• PromtEngineer localGPT
• Other injection
• CWE-707

Sinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection

• Sinaptik AI PandasAI
• Other injection
• Code injection

Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection

• Sinaptik AI PandasAI
• Other injection
• SQL injection

Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'

• softaculous Page Builder: Pagelayer – Drag and Drop website builder
• Other injection

AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters

• Other injection
• CWE-20

>=3.11.7, <3.371.4 · fixed in 3.371.4

act: Unrestricted set-env and add-path command processing enables environment injection

• Other injection

<0.2.86 · fixed in 0.2.86

Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

• Other injection

<=1.1.0 · no fixed version yet

Hugging Face Smolagents has an Injection issue

• Other injection
• Code injection

<=1.25.0.dev0 · no fixed version yet

code-projects Social Networking Site Endpoint delete_photos.php sql injection

• code-projects Social Networking Site
• Other injection
• SQL injection

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass

• Other injection
• Code injection

<=2.11.42 · no fixed version yet

itsourcecode Free Hotel Reservation System index.php sql injection

• itsourcecode Free Hotel Reservation System
• Other injection
• SQL injection

Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injection

• Shenzhen Ruiming Technology Streamax Crocus
• Other injection
• SQL injection

Shenzhen Ruiming Technology Streamax Crocus OperateStatistic.do sql injection

• Shenzhen Ruiming Technology Streamax Crocus
• Other injection
• SQL injection

mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection

• mingSoft MCMS
• Other injection
• SQL injection

LDAP injection in Open-Xchange GmbH OX Dovecot Pro

• Open-Xchange GmbH OX Dovecot Pro
• Other injection

Spring AI has a Cypher Injection vulnerability in Neo4jVectorFilterExpressionConverter

• SQL injection
• Other injection

>=1.0.0-M5, <1.0.5 || >=1.1.0-M1, <1.1.4 · fixed in 1.0.5, 1.1.4

Spring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters

• Other injection

>=1.0.0-M5, <1.0.5 || >=1.1.0-M1, <1.1.4 · fixed in 1.0.5, 1.1.4

Shenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do sql injection

• Shenzhen Ruiming Technology Streamax Crocus
• Other injection
• SQL injection

code-projects Simple Laundry System Parameter modstaffinfo.php sql injection

• code-projects Simple Laundry System
• Other injection
• SQL injection

Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

• Other injection

<8.0.4 · fixed in 8.0.4

URL Parameter Injection in FDC Food Search API Causes Server Crash and Exposes Internal API Key

• recipes
• Other injection

n8n Vulnerable to LDAP Filter Injection in LDAP Node

• Other injection

<1.123.27 || >=2.0.0-rc.0, <2.13.3 || >=2.14.0, <2.14.1 · fixed in 1.123.27, 2.13.3, 2.14.1

itsourcecode Free Hotel Reservation System index.php sql injection

• itsourcecode Free Hotel Reservation System
• Other injection
• SQL injection

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

• HCL Aftermarket DPC
• Other injection

code-projects Simple Laundry System Parameter checkregisitem.php sql injection

• code-projects Simple Laundry System
• Other injection
• SQL injection

code-projects Online Food Ordering System Admin Login admin.php sql injection

• code-projects Online Food Ordering System
• Other injection
• SQL injection

itsourcecode Online Enrollment System Parameter index.php sql injection

• itsourcecode Online Enrollment System
• Other injection
• SQL injection

code-projects Online Food Ordering System Shopping Cart cart.php sql injection

• code-projects Online Food Ordering System
• Other injection
• SQL injection

SourceCodester Food Ordering System Parameter purchase.php sql injection

• SourceCodester Food Ordering System
• Other injection
• SQL injection

SourceCodester Malawi Online Market display.php sql injection

• SourceCodester Malawi Online Market
• Other injection
• SQL injection

code-projects Accounting System delete.php sql injection

• code-projects Accounting System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_stock.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_sales.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .

• IBM Maximo Application Suite - Monitor Component
• Other injection

CRLF injection in Cisco IOS XE Software

• Cisco IOS XE Software
• Other injection

code-projects Simple Laundry System Parameter checkcheckout.php sql injection

• code-projects Simple Laundry System
• Other injection
• SQL injection

itsourcecode College Management System Parameter add-single-student-results.php sql injection

• itsourcecode College Management System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_purchase.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_out_standing.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_customer_details.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_category.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

SourceCodester Sales and Inventory System POST Parameter view_supplier.php sql injection

• SourceCodester Sales and Inventory System
• Other injection
• SQL injection

iCalendar has ICS injection via unsanitized URI property values

• Other injection

>=2.0.0, <2.12.2 · fixed in 2.12.2

Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API

• Other injection

<2.3.5 · fixed in 2.3.5

NGINX ngx_mail_proxy_module vulnerability

• F5 NGINX Open Source
• F5 NGINX Plus
• Other injection

Langflow GitHub Actions Shell Injection

• langflow
• Other injection
• Command injection

itsourcecode Online Enrollment System Parameter index.php sql injection

• itsourcecode Online Enrollment System
• Other injection
• SQL injection

SourceCodester Online Admission System programmes.php sql injection

• SourceCodester Online Admission System
• Other injection
• SQL injection