# SQL injection. Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [CodeAstro Apartment Visitor Management System report.php sql injection](https://agentprime.io/advisories/CVE-2026-14796.md) `CVE-2026-14796` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 5.3 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Apartment Visitor Management System action-visitor.php sql injection](https://agentprime.io/advisories/CVE-2026-14795.md) `CVE-2026-14795` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 5.3 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System paymentdischarge.php sql injection](https://agentprime.io/advisories/CVE-2026-14774.md) `CVE-2026-14774` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System payment.php sql injection](https://agentprime.io/advisories/CVE-2026-14773.md) `CVE-2026-14773` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_course1.php sql injection](https://agentprime.io/advisories/CVE-2026-14772.md) `CVE-2026-14772` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_exam1.php sql injection](https://agentprime.io/advisories/CVE-2026-14771.md) `CVE-2026-14771` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_room.php sql injection](https://agentprime.io/advisories/CVE-2026-14770.md) `CVE-2026-14770` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services pay.php sql injection](https://agentprime.io/advisories/CVE-2026-14769.md) `CVE-2026-14769` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services builderHome.php sql injection](https://agentprime.io/advisories/CVE-2026-14768.md) `CVE-2026-14768` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Ecommerce Website POST Parameter confirm.php sql injection](https://agentprime.io/advisories/CVE-2026-14767.md) `CVE-2026-14767` · CVE record: CodeAstro Ecommerce Website · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection](https://agentprime.io/advisories/CVE-2026-14766.md) `CVE-2026-14766` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection](https://agentprime.io/advisories/CVE-2026-14764.md) `CVE-2026-14764` · CVE record: code-projects Hotel and Tourism Reservation · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection](https://agentprime.io/advisories/CVE-2026-14763.md) `CVE-2026-14763` · CVE record: code-projects Hotel and Tourism Reservation · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection](https://agentprime.io/advisories/CVE-2026-14762.md) `CVE-2026-14762` · CVE record: code-projects Hotel and Tourism Reservation · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection](https://agentprime.io/advisories/CVE-2026-14756.md) `CVE-2026-14756` · CVE record: code-projects Hotel and Tourism Reservation · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection](https://agentprime.io/advisories/CVE-2026-14755.md) `CVE-2026-14755` · CVE record: code-projects Hotel and Tourism Reservation · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Hotel and Tourism Reservation add_room.php sql injection](https://agentprime.io/advisories/CVE-2026-14754.md) `CVE-2026-14754` · CVE record: code-projects Hotel and Tourism Reservation · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injection](https://agentprime.io/advisories/CVE-2026-14751.md) `CVE-2026-14751` · CVE record: mjperpinosa stumasy · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injection](https://agentprime.io/advisories/CVE-2026-14750.md) `CVE-2026-14750` · CVE record: mjperpinosa stumasy · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services addprojectsale.php sql injection](https://agentprime.io/advisories/CVE-2026-14747.md) `CVE-2026-14747` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services addprojectrent.php sql injection](https://agentprime.io/advisories/CVE-2026-14746.md) `CVE-2026-14746` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services single-list_rent.php sql injection](https://agentprime.io/advisories/CVE-2026-14745.md) `CVE-2026-14745` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services normalHomeRent.php sql injection](https://agentprime.io/advisories/CVE-2026-14744.md) `CVE-2026-14744` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Real State Services normalHomeSale.php sql injection](https://agentprime.io/advisories/CVE-2026-14743.md) `CVE-2026-14743` · CVE record: code-projects Real State Services · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [Hanwang e-Face General Management Platform querySysAuthStr.do sql injection](https://agentprime.io/advisories/CVE-2026-14737.md) `CVE-2026-14737` · CVE record: Hanwang e-Face General Management Platform · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Smart Parking System parkings.php sql injection](https://agentprime.io/advisories/CVE-2026-14735.md) `CVE-2026-14735` · CVE record: code-projects Smart Parking System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_product.php sql injection](https://agentprime.io/advisories/CVE-2026-14734.md) `CVE-2026-14734` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection](https://agentprime.io/advisories/CVE-2026-14733.md) `CVE-2026-14733` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_exam.php sql injection](https://agentprime.io/advisories/CVE-2026-14732.md) `CVE-2026-14732` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientreport.php sql injection](https://agentprime.io/advisories/CVE-2026-14731.md) `CVE-2026-14731` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientprofile.php sql injection](https://agentprime.io/advisories/CVE-2026-14730.md) `CVE-2026-14730` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientlogin.php sql injection](https://agentprime.io/advisories/CVE-2026-14717.md) `CVE-2026-14717` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injection](https://agentprime.io/advisories/CVE-2026-14713.md) `CVE-2026-14713` · CVE record: SourceCodester Pizzafy E-Commerce System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Examination Quiz Creation Feature update.php sql injection](https://agentprime.io/advisories/CVE-2026-14706.md) `CVE-2026-14706` · CVE record: code-projects Online Examination · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Examination head.php sql injection](https://agentprime.io/advisories/CVE-2026-14705.md) `CVE-2026-14705` · CVE record: code-projects Online Examination · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientorder.php sql injection](https://agentprime.io/advisories/CVE-2026-14703.md) `CVE-2026-14703` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Internship Management System Password Change Endpoint change_password.php sql injection](https://agentprime.io/advisories/CVE-2026-14701.md) `CVE-2026-14701` · CVE record: code-projects Internship Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Internship Management System Employer Login Endpoint login.php sql injection](https://agentprime.io/advisories/CVE-2026-14700.md) `CVE-2026-14700` · CVE record: code-projects Internship Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection](https://agentprime.io/advisories/CVE-2026-14695.md) `CVE-2026-14695` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection](https://agentprime.io/advisories/CVE-2026-14694.md) `CVE-2026-14694` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection](https://agentprime.io/advisories/CVE-2026-14692.md) `CVE-2026-14692` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Apartment Visitor Management System add-apartment.php sql injection](https://agentprime.io/advisories/CVE-2026-14689.md) `CVE-2026-14689` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Hotel Management System login.php sql injection](https://agentprime.io/advisories/CVE-2026-14688.md) `CVE-2026-14688` · CVE record: itsourcecode Online Hotel Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Job Portal login.php sql injection](https://agentprime.io/advisories/CVE-2026-14660.md) `CVE-2026-14660` · CVE record: code-projects Online Job Portal · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patientappointment.php sql injection](https://agentprime.io/advisories/CVE-2026-14659.md) `CVE-2026-14659` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Assessment Management marking-scheme.php sql injection](https://agentprime.io/advisories/CVE-2026-14658.md) `CVE-2026-14658` · CVE record: code-projects Assessment Management · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Assessment Management Database Query marking-scheme.php sql injection](https://agentprime.io/advisories/CVE-2026-14657.md) `CVE-2026-14657` · CVE record: code-projects Assessment Management · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection](https://agentprime.io/advisories/CVE-2026-14654.md) `CVE-2026-14654` · CVE record: SourceCodester Simple and Nice Shopping Cart Script · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection](https://agentprime.io/advisories/CVE-2026-14653.md) `CVE-2026-14653` · CVE record: SourceCodester Simple and Nice Shopping Cart Script · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection](https://agentprime.io/advisories/CVE-2026-14652.md) `CVE-2026-14652` · CVE record: SourceCodester Simple and Nice Shopping Cart Script · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Voting System saveVote.php test_input sql injection](https://agentprime.io/advisories/CVE-2026-14649.md) `CVE-2026-14649` · CVE record: code-projects Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [code-projects Online Voting System Login authentication.php test_input sql injection](https://agentprime.io/advisories/CVE-2026-14648.md) `CVE-2026-14648` · CVE record: code-projects Online Voting System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_class2.php sql injection](https://agentprime.io/advisories/CVE-2026-14642.md) `CVE-2026-14642` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_course.php sql injection](https://agentprime.io/advisories/CVE-2026-14641.md) `CVE-2026-14641` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Apartment Visitor Management System Login index.php sql injection](https://agentprime.io/advisories/CVE-2026-14640.md) `CVE-2026-14640` · CVE record: CodeAstro Apartment Visitor Management System · CVSS 6.9 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [CodeAstro Ecommerce Website my_account.php sql injection](https://agentprime.io/advisories/CVE-2026-14639.md) `CVE-2026-14639` · CVE record: CodeAstro Ecommerce Website · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System patient.php sql injection](https://agentprime.io/advisories/CVE-2026-14638.md) `CVE-2026-14638` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System medicine.php sql injection](https://agentprime.io/advisories/CVE-2026-14619.md) `CVE-2026-14619` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jul 2026 · Tags: Other injection, SQL injection - [SQLi in Raera's Destekz](https://agentprime.io/advisories/CVE-2026-4321.md) `CVE-2026-4321` · CVE record: Raera - Ankara Web Design and Digital Advertising Agency Destekz · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jul 2026 · Tags: SQL injection - [Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter](https://agentprime.io/advisories/CVE-2026-12920.md) `CVE-2026-12920` · CVE record: wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent · CVSS 4.9 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .