Other injection.

KMS request injection via unsanitized key vault and provider values in libmongocrypt

• MongoDB libmongocrypt
• Other injection

Update operator injection via single-element list rewriting in the update builder

• MongoDB C# Driver
• Other injection

NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys

• MongoDB C# Driver
• Other injection

NoSQL operator injection via unvalidated replacement document in findOneAndReplace

• MongoDB C# Driver
• Other injection

oretnom23 php-travel-agency-system Insertion insert.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

CRLF injection in Roundcube Webmail

• Roundcube Webmail
• Other injection

TOTOLINK A950RG product.so UploadCustomModule command injection

• TOTOLINK A950RG
• Other injection
• Command injection

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab

• GitLab
• Other injection

SPL Injection through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Other injection

oretnom23 php-travel-agency-system update.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

oretnom23 php-travel-agency-system delete.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System transactionsave.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System orderdetail.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System inserttrans.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System deleteproduct.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection

• ProjectWorlds Advanced Library Management System
• Other injection
• SQL injection

ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection

• ProjectWorlds Advanced Library Management System
• Other injection
• SQL injection

ProjectWorlds Advanced Library Management System edit_member.php sql injection

• ProjectWorlds Advanced Library Management System
• Other injection
• SQL injection

ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection

• ProjectWorlds Advanced Library Management System
• Other injection
• SQL injection

oretnom23 file-management-system-php File Management files.php sql injection

• oretnom23 file-management-system-php
• Other injection
• SQL injection

Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

• Cisco Emergency Responder
• Cisco Unified Communications Manager
• Other injection

oretnom23 file-management-system-php File Download download.php readfile sql injection

• oretnom23 file-management-system-php
• Other injection
• SQL injection

oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection

• oretnom23 file-management-system-php
• Other injection
• SQL injection

oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection

• oretnom23 file-management-system-php
• Other injection
• SQL injection

oretnom23 file-management-system-php admin_class.php login sql injection

• oretnom23 file-management-system-php
• Other injection
• SQL injection

itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection

• itsourcecode Sales-and-Inventory-System
• Other injection
• SQL injection

itsourcecode Sales-and-Inventory-System cust_del.php sql injection

• itsourcecode Sales-and-Inventory-System
• Other injection
• SQL injection

itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

• itsourcecode Sales-and-Inventory-System
• Other injection
• SQL injection

Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login

• polonel trudesk
• Other injection

Trudesk through 1.2.11 MongoDB $where Injection via tickets search API

• polonel trudesk
• Other injection

dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection

• dhikshitha29 Insurance-Management-System
• Other injection
• SQL injection

dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection

• dhikshitha29 Insurance-Management-System
• Other injection
• SQL injection

projectworlds Advanced Library Management System report_search.php mysqli_query sql injection

• projectworlds Advanced Library Management System
• Other injection
• SQL injection

itsourcecode Online Cake Ordering System deletecustomer.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

Injection in Google Chrome

• Google Chrome
• Other injection

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

• Broken access control
• Other injection

<3.7.0 · fixed in 3.7.0

DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection

• DrayTek Vigor2960
• Other injection
• Command injection

DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

• DrayTek Vigor2960
• Other injection
• Command injection

DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

• DrayTek Vigor2960
• Other injection
• Command injection

DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection

• DrayTek Vigor2960
• Other injection
• Command injection

opensource-socialnetwork Cache Settings dynamic.php input code injection

• opensource-socialnetwork
• Other injection
• Code injection

Osclass Item Model Item.php findUserItems sql injection

• Osclass
• Other injection
• SQL injection

ArmorX Global Technology｜ArmorX Spam - Command Injection

• ArmorX Global Technology ArmorX Spam
• Other injection

CRLF injection in Roundcube Webmail

• Roundcube Webmail
• Other injection

H3C Magic NX15 RPC esps write code injection

• H3C Magic NX15
• Other injection
• Code injection

Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection

• Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System
• Other injection
• SQL injection

IBM Concert Software Improper Output Neutralization for Logs

• IBM Concert
• Other injection

vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection

• vraj404 Criminal-Management-System
• Other injection
• SQL injection

vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection

• vraj404 Criminal-Management-System
• Other injection
• SQL injection

vraj404 Criminal Management System Submission Form home.php sql injection

• vraj404 Criminal Management System
• Other injection
• SQL injection

vraj404 Criminal-Management-System search.php sql injection

• vraj404 Criminal-Management-System
• Other injection
• SQL injection

satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection

• satya-vinay Events-Management-System
• Other injection
• SQL injection

satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection

• satya-vinay Events-Management-System
• Other injection
• SQL injection

llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection

• llSourcell Doctor-Dignity
• Other injection
• Code injection

subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

• subhajitkhan online-clinic-management-system
• Other injection
• SQL injection

AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection

• AXA Group NLP.js
• Other injection
• Code injection

MISP CSS Injection via Remote Tag Colour in Event Preview

• MISP
• Other injection

DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection

• DeepPavlov
• Other injection
• Code injection

DeepPavlov Config Reference Resolver params.py resolve code injection

• DeepPavlov
• Other injection
• Code injection

Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection

• Dav-ee dairy-management-system
• Other injection
• SQL injection