Other injection.

Subscribe to Comments 2.3 - 2.3.2 - Author+ Email Header Injection via From Name Setting

• Subscribe to Comments
• Other injection

Dav-ee dairy-management-system delete.php mysqli_query sql injection

• Dav-ee dairy-management-system
• Other injection
• SQL injection

Dav-ee dairy-management-system add.php mysqli_query sql injection

• Dav-ee dairy-management-system
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System confirm.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

LlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection

• LlamaChinese Llama-Chinese
• Other injection
• Code injection

RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection

• RVC-Project Retrieval-based-Voice-Conversion-WebUI
• Other injection
• Code injection

aircheng-org iWebShop-5 util.php search sql injection

• aircheng-org iWebShop-5
• Other injection
• SQL injection

itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection

• itsmeravitejak Online-Examination-System
• Other injection
• SQL injection

WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection

• WongKinYiu yolov9
• Other injection
• Code injection

kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

• kishan0725 Hospital Management System
• Other injection
• SQL injection

AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

• AUTOMATIC1111 stable-diffusion-webui
• Other injection
• Code injection

alexpasmantier television entry.rs output command injection

• alexpasmantier television
• Other injection
• Command injection

itsmeravitejak Online-Examination-System AJAX Endpoint exammanger.php topicslist sql injection

• itsmeravitejak Online-Examination-System
• Other injection
• SQL injection

itsmeravitejak Online-Examination-System database.php getreport sql injection

• itsmeravitejak Online-Examination-System
• Other injection
• SQL injection

itsmeravitejak Online-Examination-System subjectsdb.php sql injection

• itsmeravitejak Online-Examination-System
• Other injection
• SQL injection

nemoTyrant manong func.php arr2sql sql injection

• nemoTyrant manong
• Other injection
• SQL injection

Tandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor Recipes

• recipes
• Other injection

Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php

• Netgate pfSense CE
• Other injection

Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php

• Netgate pfSense CE
• Other injection

Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner

• Netgate pfSense CE
• Other injection

Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting

• Netgate pfSense CE
• Other injection

Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid

• Netgate pfSense CE
• Other injection

Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username

• Netgate pfSense CE
• Other injection

CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

• OpenPrinting cups
• Other injection
• Command injection

CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)

• OpenPrinting cups
• Other injection
• Code injection

OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking

• opnsense core
• Other injection

OPNsense: XPath injection in MVC safe-delete

• opnsense core
• Other injection

OPNsense: XPATH Injection can disclose any secret in config.xml

• opnsense core
• Other injection

EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export

• espocrm
• Other injection

MDX and SOAP Injection in Kendo UI for jQuery

• Progress Software Kendo UI for jQuery
• Other injection

Injection in Eclipse Foundation Eclipse Jetty

• Eclipse Foundation Eclipse Jetty
• Other injection

Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter

• ThemeHigh Email Customizer for WooCommerce (Pro)
• Other injection

FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token

• FreeRDP
• Other injection

cemtan sar2html Archive Processing sar2html.py updateDb sql injection

• cemtan sar2html
• Other injection
• SQL injection

cemtan sar2html sar2html.py index sql injection

• cemtan sar2html
• Other injection
• SQL injection

CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

• Eclipse Foundation Eclipse Vert.x
• Other injection

cpp-httplib open_stream serializes CRLF in request target into HTTP request line

• yhirose cpp-httplib
• Other injection

Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used

• Juniper Networks Junos OS
• Other injection

Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution

• Zimbra Collaboration Suite
• Other injection

MOVEit Transfer LDAP injection in certificate-based authentication

• Progress MOVEit Transfer
• Other injection

Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email

• Responsive Blocks
• Other injection

Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

• Adobe Experience Manager 6.5
• Other injection

Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth

• Finsys dockhand
• Other injection

Azure Storage Library Elevation of Privilege Vulnerability

• Microsoft azure-storage-blob-batch
• Microsoft Edge (Chromium-based)
• Other injection

SourceCodester Online Reviewer System index.php prepare sql injection

• SourceCodester Online Reviewer System
• Other injection
• SQL injection

SourceCodester Online Exam System Login Endpoint loginExe.php sql injection

• SourceCodester Online Exam System
• Other injection
• SQL injection

BUG-000171040 Portal for ArcGIS has a security vulnerability

• Esri Portal for ArcGIS
• Other injection

SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection

• SourceCodester Art Gallery Management System
• Other injection
• SQL injection

Plane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path)

• plane
• Other injection

girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members

• froxlor
• Other injection

HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection

• HBAI-Ltd Toonflow-app
• Other injection
• Command injection

AdithyaYelloju Restaurant-Management-System Password Reset forgot3.php sql injection

• AdithyaYelloju Restaurant-Management-System
• Other injection
• SQL injection

itsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection

• itsmeravitejak Online-Examination-System
• Other injection
• SQL injection

SourceCodester Performance Indicator System sales_history.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System edit_credit.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System product.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System edit_quantity.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection