Other injection.

Ghost: Invite Token Disclosure in Ghost Admin API

• Information disclosure
• Other injection

>=4.39.0, <6.64.0 · fixed in 6.64.0

Cisco Meraki Security Hardening Release October 2026 - Improper Neutralization of Special Elements Vulnerabilities

• Cisco Campus Gateway Software
• Cisco Meraki MR Wireless Access Points Software
• Other injection

Ghost: Authorization Bypass in Comments Feature

• Other injection

>=5.9.0, <6.44.1 · fixed in 6.44.1

MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes

• MetForm
• Other injection

An HTTP header injection vulnerability was found in the ADM

• ASUSTOR Inc. ADM
• Other injection

Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields

• Other injection

>=3.0.0, <3.8.0 · fixed in 3.8.0

Security Advisory 0191

• Arista Networks CloudVision CUE
• Other injection

Security Advisory 0190

• Arista Networks CloudVision CUE
• Other injection

MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS

• MISP sachertortephp
• Cross-site scripting (XSS)
• Other injection

SourceCodester Performance Indicator System view_product.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

i18next-http-backend incomplete URL validation permits SSRF

• Other injection
• Server-side request forgery (SSRF)

<4.0.2 · fixed in 4.0.2

LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

• Other injection

<1.1.1 · fixed in 1.1.1

Kusalkasilva Learning-Management-System search_class.php sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

SourceCodester Simple Student Information System searchquery.php sql injection

• SourceCodester Simple Student Information System
• Other injection
• SQL injection

bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection

• bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

• Other injection

<4.18.1 · fixed in 4.18.1

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

• Other injection

>=1.1.0, <1.24.5 || >=2.0.0, <2.4.2 · fixed in 1.24.5, 2.4.2

girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

CVE-2026-82989

• Viewsonic vCast
• Other injection
• CWE-147

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

• Other injection

<3.2.2 · fixed in 3.2.2

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

• Other injection
• Code injection

>=1.3.0, <1.10.3 · fixed in 1.10.3

girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection

• feelec-yishu feelcrm-os
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

onetwothreeneth HospitalManagementSystem print.php get sql injection

• onetwothreeneth HospitalManagementSystem
• Other injection
• SQL injection

onetwothreeneth HospitalManagementSystem transaction_details.php sql injection

• onetwothreeneth HospitalManagementSystem
• Other injection
• SQL injection

UNION HospitalManagementSystem patient_info.php sql injection

• UNION HospitalManagementSystem
• Other injection
• SQL injection

onetwothreeneth HospitalManagementSystem controller.php sql injection

• onetwothreeneth HospitalManagementSystem
• Other injection
• SQL injection

Plane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle)

• plane
• Other injection

TallCMS PluginManager ThemeManager.php code injection

• TallCMS
• Other injection
• Code injection

feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection

• feelec-yishu feelcrm-os
• Other injection
• SQL injection

itsourcecode Online Admission System schoolyear.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

itsourcecode Online Admission System Project login1.php sql injection

• itsourcecode Online Admission System Project
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php course sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php update sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

kishor-23 food-waste-management-system Registration deliverysignup.php sql injection

• kishor-23 food-waste-management-system
• Other injection
• SQL injection

kishor-23 food-waste-management-system Admin Registration signup.php sql injection

• kishor-23 food-waste-management-system
• Other injection
• SQL injection

kishor-23 food-waste-management-system deliverymyord.php sql injection

• kishor-23 food-waste-management-system
• Other injection
• SQL injection

kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

• kishor-23 food-waste-management-system
• Other injection
• SQL injection

osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

• osCommerce2
• Other injection
• Code injection

osCommerce osCommerce2 Payment payment.php include code injection

• osCommerce2
• Other injection
• Code injection

itsourcecode Online Admission System key.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

itsourcecode Online Admission System new.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

itsourcecode Online Admission System examinee.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

itsourcecode Online Admission System creteria.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

itsourcecode Online Admission System confirm.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php update sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

itsourcecode Online Admission System register1.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

SourceCodester Drug Recommendation System edit_class.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

SourceCodester Drug Recommendation System Student Registration add_student.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

itsourcecode Online Admission System login1.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

kishor-23 food-waste-management-system Take Order delivery.php sql injection

• kishor-23 food-waste-management-system
• Other injection
• SQL injection