Other injection.

SourceCodester Performance Indicator System addproduct.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file2dict code injection

• storyicon comfyui_segment_anything
• Other injection
• Code injection

PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection

• PaddlePaddle PaddleX
• Other injection
• Code injection

itsourcecode Online Cake Ordering System addtransacdetail.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

Log injection in fail2ban

• fail2ban
• Other injection

TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection

• TinyLLaVA_Factory
• Other injection
• Code injection

code-projects Online Reviewer System User Update btn_functions.php sql injection

• code-projects Online Reviewer System
• Other injection
• SQL injection

iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection

• iMoonLab yolov13
• Other injection
• Code injection

repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

• repository RAE
• Other injection
• Code injection

ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

• ModelTC LightX2V
• Other injection
• Code injection

Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection

• Linketic CityGaussian
• Other injection
• Code injection

Frappe before 15.86.0 LDAP Injection via Unsanitized Endpoint Parameters

• frappe
• Other injection

Netcore NR268 DDNS DDNSset.cgi execvp argument injection

• Netcore NR268
• Other injection
• Command injection

itsourcecode Online Admission System sum.php sql injection

• itsourcecode Online Admission System
• Other injection
• SQL injection

itsourcecode Baptism Information Management System pbaptism.php sql injection

• itsourcecode Baptism Information Management System
• Other injection
• SQL injection

itsourcecode Baptism Information Management System ebaptism.php sql injection

• itsourcecode Baptism Information Management System
• Other injection
• SQL injection

Edimax BR-6208AC formWlanMP command injection

• Edimax BR-6208AC
• Other injection
• Command injection

Edimax BR-6208AC formAutoFWupgrade command injection

• Edimax BR-6208AC
• Other injection
• Command injection

Edimax BR-6208AC formAccept command injection

• Edimax BR-6208AC
• Other injection
• Command injection

HTTP response splitting in Progress MarkLogic Server Query Console

• Progress Software Corporation MarkLogic Server
• Other injection

LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header

• librenms
• Other injection

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder

• ImageMagick
• Other injection

Exponent CMS XML-RPC xmlrpc.php userLogin sql injection

• Exponent CMS
• Other injection
• SQL injection

Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via Exports

• Thelia
• Other injection

Zen Cart Module Configuration modules.php sql injection

• Zen Cart
• Other injection
• SQL injection

Zen Cart Admin Panel configuration.php eval sql injection

• Zen Cart
• Other injection
• SQL injection

Zen Cart Administrative Module Management general.php zen_call_function code injection

• Zen Cart
• Other injection
• Code injection

Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection

• Zen Cart
• Other injection
• SQL injection

DataEase Utils.java Utils.buildCalcField sql injection

• DataEase
• Other injection
• SQL injection

Tencent WeKnora SQL Validator inject.go validateSubquery sql injection

• Tencent WeKnora
• Other injection
• SQL injection

agno-agi agno PythonTools python.py run_python_code code injection

• agno
• Other injection
• Code injection

SEMCMS SEMCMS_Banner.php sql injection

• SEMCMS
• Other injection
• SQL injection

SEMCMS SEMCMS_Download.php sql injection

• SEMCMS
• Other injection
• SQL injection

Insufficient Neutralization of Formula Elements in CSV Exports

• OTRS
• OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition
• Other injection

krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection

• jackq XCMS
• Other injection
• SQL injection

ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection

• ZKTeco BioTime
• Other injection
• SQL injection

erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection

• erzhongxmu JEEWMS
• Other injection
• SQL injection

erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection

• erzhongxmu Jeewms
• Other injection
• SQL injection

Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection

• Xinhu Rainrock RockOA
• Other injection
• SQL injection

Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection

• Furion .NET Framework
• Other injection
• SQL injection

highwarden Super Store Finder index.php sql injection

• highwarden Super Store Finder
• Other injection
• SQL injection

OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export

• openpanel
• Other injection

Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'display_name'

• themeum Kirki – Freeform Page Builder, Website Builder & Customizer
• Other injection

Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection

• Kirki
• Other injection

LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

• Other injection

<1.3.1 · fixed in 1.3.1

PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

• SQL injection
• Other injection

<4.6.78 · fixed in 4.6.78

CRLF injection in Brocade Fabric OS

• Brocade Fabric OS
• Other injection

CRLF injection in Brocade Fabric OS

• Brocade Fabric OS
• Other injection

Log Injection through the REST API in Splunk App for Splunk O11y Cloud

• Splunk Enterprise
• Other injection

Ghost: Password Hash Ordering Disclosure in Ghost Admin API

• Information disclosure
• Other injection

>=0.7.2, <6.64.0 · fixed in 6.64.0