Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.1 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Pizzafy Ecommerce System view_prod.php sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 5.3 Medium
SourceCodester Pizzafy Ecommerce System index.php category sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 8.8 High
Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()
- SQL injection
>=1.0.0, <1.0.6 || >=1.1.0, <1.1.5 · fixed in 1.0.6, 1.1.5
GHSA-63c8-m9m2-cvr3 · CVE-2026-40978 - CVSS 5.3 Medium
SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Coaching Management System POST reply.php sql injection
- code-projects Coaching Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pizzafy Ecommerce System ajax.php login sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
- CVSS 6.9 Medium
sqlite-mcp has an Injection issue
- Other injection
- SQL injection
<=0.1.0 · no fixed version yet
GHSA-4j28-22qp-rjcf · CVE-2026-7206 - CVSS 8.1 High
SQL injection in ProFTPD
- ProFTPD
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Online Classroom guestdetails sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 4.0, no score published
Duplicate Advisory: Pimcore admin users can trigger SQL Injection
- SQL injection
=12.3.3 · no fixed version yet
GHSA-c8g3-x47w-8q7p - CVSS 5.3 Medium
CodeAstro Online Classroom addnewfaculty sql injection
- CodeAstro Online Classroom
- Other injection
- SQL injection
- CVSS 5.3 Medium
1000 Projects Portfolio Management System MCA block_status.php sql injection
- 1000 Projects Portfolio Management System MCA
- Other injection
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
ProjeQtor < 12.4.4 Unauthenticated SQL Injection via Login
- ProjeQtor
- SQL injection
- CVSS 6.9 Medium
code-projects Online Lot Reservation System loginuser.php sql injection
- code-projects Online Lot Reservation System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System cancel.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System approve.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System delete.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Directorist Booking plugin < 3.0.2 - SQL Injection vulnerability
- Directorist Booking
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System edit.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
- SourceCodester Pharmacy Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.1 Medium
likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection
- likeadmin-likeshop likeadmin_php
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Courier Management System edit_parcel.php sql injection
- itsourcecode Courier Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Courier Management System edit_branch.php sql injection
- itsourcecode Courier Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Construction Management System locations.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Construction Management System execute1.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Construction Management System execute.php sql injection
- itsourcecode Construction Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
CodePanda Source canteen_management_system login.php sql injection
- CodePanda Source canteen_management_system
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Inventory Management System Login sql injection
- code-projects Inventory Management System
- Other injection
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter
- SQL injection
- CVSS 6.5 Medium
SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php.
- SQL injection
- CVSS 6.9 Medium
code-projects Employee Management System Endpoint eprocess.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection
- liyupi yu-picture
- Other injection
- SQL injection
- CVSS 5.1 Medium
CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection
- CodeAstro Online Job Portal
- Other injection
- SQL injection
- CVSS 5.3 Medium
ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection
- ByteDance coze-studio
- Other injection
- SQL injection
- CVSS 6.9 Medium
KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection
- KLiK SocialMediaWebsite
- Other injection
- SQL injection
- CVSS 5.3 Medium
colinhacks Zod CUID Data Type regexes.ts sql injection
- colinhacks Zod
- Other injection
- SQL injection
- CVSS 5.3 Medium
ShowDoc has an Injection vulnerability
- Other injection
- SQL injection
<3.8.1 · fixed in 3.8.1
GHSA-fm5r-cj7v-rj2c · CVE-2026-6982 - CVSS 5.1 Medium
JiZhiCMS addcache.html htmlspecialchars_decode sql injection
- JiZhiCMS
- Other injection
- SQL injection
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
LiteLLM has SQL Injection in Proxy API key verification
- SQL injection
>=1.81.16, <1.83.7 · fixed in 1.83.7
GHSA-r75f-5x8p-qvmc · CVE-2026-42208 - CVSS 8.9 High
Roxy-WI has SQL Injection in haproxy_section_save Endpoint via Unsanitized server_ip Parameter
- roxy-wi
- SQL injection
- CVSS 7.6 High
Xibo CMS API has SQL Injection via DataSet Filter Parameter
- xibosignage xibo-cms
- SQL injection
- CWE-184
- CVSS 9.6 CriticalCritical · CVSS 9+
OpenC3 COSMOS has SQL Injection in QuestDB Time-Series Database
- SQL injection
>=6.7.0, <7.0.0-rc3 · fixed in 7.0.0-rc3
GHSA-v529-vhwc-wfc5 · CVE-2026-42087 - CVSS 9.3 CriticalCritical · CVSS 9+
SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberall
- SocialEngine
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
BorG Technology Corporation｜Borg SPM 2007 - SQL Injection
- BorG Technology Corporation Borg SPM 2007
- SQL injection
- CVSS 5.1 Medium
SQL injection in KANATA Limited CMS ALAYA
- KANATA Limited CMS ALAYA
- SQL injection