Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
tushar-2223 Hotel Management System roomdelete.php sql injection
- tushar-2223 Hotel Management System
- Other injection
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.
- SQL injection
- CVSS 7.3 High
Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.php
- SQL injection
- CVSS 2.7 Low
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.
- SQL injection
- CVSS 2.7 Low
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.
- SQL injection
- CVSS 8.8 High
Dolibarr has SQL injection vulnerability in the rowid parameter of the admin dict.php
- SQL injection
<=8.0.4 · no fixed version yet
GHSA-xxxg-x793-7fq3 · CVE-2019-25710 - CVSS 7.1 High
MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter
- MyT Project Management
- SQL injection
- CVSS 7.1 High
eBrigade ERP 4.5 SQL Injection via pdf.php
- eBrigade ERP
- SQL injection
- CVSS 7.1 High
ImpressCMS 1.3.11 SQL Injection via bid Parameter
- ImpressCMS
- SQL injection
- CVSS 7.1 High
Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter
- Newsbull Haber Script
- SQL injection
- CVSS 8.8 High
CMSsite 1.0 SQL Injection via category.php
- VictorAlagwu CMSsite
- SQL injection
- CVSS 7.1 High
Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
- Adianti Framework
- SQL injection
- CVSS 6.5 Medium
LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter
- chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
- SQL injection
- CVSS 7.2 High
PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
- SQL injection
<4.5.133 · fixed in 4.5.133
GHSA-x783-xp3g-mqhp · CVE-2026-40315 - CVSS 0.0 None
@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler
- SQL injection
<1.4.5 || >=1.5.0, <1.5.5 || >=1.6.0-alpha.0, <1.6.0-beta.4 · fixed in 1.4.5, 1.5.5, 1.6.0-beta.4
GHSA-59xv-588h-2vmm - CVSS 6.9 Medium
code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection
- code-projects Vehicle Showroom Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Vehicle Showroom Management System AddVehicleFunction.php sql injection
- code-projects Vehicle Showroom Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection
- code-projects Vehicle Showroom Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Online Classroom updatedetailsfromstudent.php sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum add-category-function.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Construction Management System del1.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Online Classroom takeassessment2.php sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Construction Management System del.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Patient Record Management System edit_hpatient.php sql injection
- code-projects Patient Record Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Patient Record Management System hematology_print.php sql injection
- code-projects Patient Record Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum delete-category.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php.
- SQL injection
- CVSS 8.8 High
An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22.
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum crud.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 8.8 High
WordPress adivaha Travel Plugin 2.3 SQL Injection via pid
- WordPress adivaha Travel Plugin
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum topic-details.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 7.2 High
SQL injection in SonicWall SMA1000
- SonicWall SMA1000
- SQL injection
- CVSS 8.7 High
SQL Injection in AlanWeb SCADA
- Control System AlanWeb SCADA
- SQL injection
- CVSS 5.1 Medium
PHPGurukul News Portal Project check_availability.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 5.1 Medium
PHPGurukul News Portal Project add-subcategory.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 5.1 Medium
PHPGurukul News Portal Project add-subadmins.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul News Portal Project news-details.php sql injection
- PHPGurukul News Portal Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum content.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum addcomment.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Simple IT Discussion Forum question-function.php sql injection
- code-projects Simple IT Discussion Forum
- Other injection
- SQL injection