SQL injection.

Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

• kubeflow pipelines
• SQL injection

SQL injection in the push notification handler of the MatchPoint Android app

• TPC Software Matchpoint
• SQL injection

SuiteCRM: Authenticated SQL Injection In action_get_end_date function

• SuiteCRM
• SQL injection

SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_list

• SuiteCRM
• SQL injection

SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated User

• SuiteCRM
• SQL injection
• Other injection

SuiteCRM: Authenticated SQL Injection in AOR_Reports `parameter_value` (value_type=Field) allows any low-privileged user to read the full database

• SuiteCRM
• SQL injection
• CWE-20

SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Management

• SuiteCRM
• SQL injection

SuiteCRM: SQL injection via search param in modules/Cases/controller.php

• SuiteCRM
• SQL injection

SuiteCRM: Authenticated SQL Injection in map_markers distance Parameter

• SuiteCRM
• SQL injection

SuiteCRM: SQL injection via get_latest_for_id param in GetLatestRevision.php

• SuiteCRM
• SQL injection

SuiteCRM: AOR Reports aor_fields.field SQL Injection

• SuiteCRM
• SQL injection

SuiteCRM: Authenticated SQL Injection In handleAttachments function

• SuiteCRM
• SQL injection

SuiteCRM: Authenticated SQL Injection In Project Module

• SuiteCRM
• SQL injection

SuiteCRM: SQL injection via parameter_value[0] param in AOR_Report.php

• SuiteCRM
• SQL injection

SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php

• SuiteCRM
• SQL injection

SuiteCRM: Time-Based Blind SQL Injection via REST API

• SuiteCRM
• SQL injection

SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api

• SuiteCRM
• SQL injection
• Other injection

SuiteCRM: Authenticated SQL Injection in get_end_date function in Project Controller

• SuiteCRM
• SQL injection

SQL injection in Trellix DLP on-prem extensions

• Trellix DLP on-prem extensions
• SQL injection

Apache OFBiz: SQL injection - performFind ignore-case values, MySQL/MariaDB

• Apache Software Foundation Apache OFBiz
• SQL injection

itsourcecode Online Book Store admin_edit.php sql injection

• itsourcecode Online Book Store
• Other injection
• SQL injection

SQL Injection in Kobikom Telecommunications' Kobikom

• Kobikom
• SQL injection

itsourcecode Airline Reservation System manage_booked.php sql injection

• itsourcecode Airline Reservation System
• Other injection
• SQL injection

Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection

• Campcodes Complete Sales and Inventory System with Credit Management
• Other injection
• SQL injection

Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection

• Campcodes Division Regional Athletic Meet Game Result Matrix System
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

GLPI: Blind Time based SQLI in dropdowns

• glpi
• SQL injection

vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView

• vtenext
• SQL injection

Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task

• Sonatype Nexus Repository 3
• SQL injection

SPIP before 4.4.29 Authenticated SQL Injection via where Parameter

• SPIP
• SQL injection

SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func

• SQL injection

SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position

• SQL injection

Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During Restore

• Duplicator
• duplicator-pro
• SQL injection

funadmin Frontend List Endpoint index selectList sql injection

• funadmin
• Other injection
• SQL injection

RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report

• francoisjacquet RosarioSIS
• SQL injection

sumiie24 School-Management-System Public Search Feature parent_Login.php sql injection

• sumiie24 School-Management-System
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated

• chamilo-lms
• SQL injection

Elo backends have code injection via unvalidated emission of programmatic AST fields

• SQL injection
• Code injection

<1.0.1 · fixed in 1.0.1

SQL injection in SonicWall Global Management System (GMS)

• SonicWall Global Management System (GMS)
• SQL injection

SQL injection in NVIDIA Slurm

• NVIDIA Slurm
• SQL injection

runZero search SQL injection

• runZero Platform
• SQL injection

WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field

• amirhelzer WPML Multilingual & Multicurrency for WooCommerce
• SQL injection

Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter

• zorem Advanced Shipment Tracking for WooCommerce
• SQL injection

SQL injection in Google Android

• Google Android
• SQL injection

psqlODBC does not escape a server-supplied column name in its updatable-cursor queries

• PostgreSQL psqlODBC
• SQL injection

psqlODBC SQL injection through SQLSpecialColumns table and schema names

• PostgreSQL psqlODBC
• SQL injection

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

• dj-extensions.com DJ-Classifieds extension for Joomla
• SQL injection

Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

• aws-sdk-pandas
• SQL injection
• CWE-149

Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter

• Control Web Panel
• SQL injection

Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API

• Control Web Panel
• SQL injection

OwnTone Server through 29.3 SQL Injection via MPD sticker find Command

• OwnTone Server
• SQL injection

SQL Injection in Starnet Computer Systems' Inventory Tracking Application

• Starnet Computer and Network Systems Inventory Tracking Application
• SQL injection

Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search

• Apache Software Foundation Apache Syncope
• SQL injection

SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption

• WSO2 API Manager
• WSO2 Traffic Manager
• SQL injection

SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product

• ZTE ElasticNet RNIA R18 NGI
• SQL injection

dayrui XunRuiCMS Member View.php View sql injection

• dayrui XunRuiCMS
• Other injection
• SQL injection

mathurvishal CloudClassroom-PHP-Project viewquery.php sql injection

• mathurvishal CloudClassroom-PHP-Project
• Other injection
• SQL injection

WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability

• Liquid Web / StellarWP BookIt
• SQL injection

Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter

• Shamalli Web 2.0 Directory plugin for WordPress
• SQL injection