SQL injection.

Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.

• SQL injection

SQL injection in Rocket.Chat

• Rocket.Chat
• SQL injection

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

• SQL injection

<=3.6.2 · no fixed version yet

Jellystat has SQL Injection that leads to to Remote Code Execution

• CyferShepard Jellystat
• SQL injection

@nocobase/database has SQL Injection via String Concatenation through Recursive Eager Loading

• SQL injection

<2.0.39 · fixed in 2.0.39

@nocobase/plugin-collection-sql: SQL Validation Bypass Through Missing `checkSQL` Call

• SQL injection
• Broken access control

<2.0.39 · fixed in 2.0.39

Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API

• SQL injection

<0.11.4 · fixed in 0.11.4

aEnrich｜a+HRD - SQL Injection

• aEnrich a+HRD
• SQL injection

OwnTone Server < 29.1 SQL Injection via query and filter Parameters

• owntone-server
• SQL injection

Electric: SQL Injection via ORDER BY Parameter in Shape API

• electric
• SQL injection

Frappe HR has possibility of SQL Injection due to improper field sanitization

• frappe hrms
• SQL injection

mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API

• mailcow-dockerized
• SQL injection
• CWE-20

OpenBao's SQL Injection in PostgreSQL database secrets engine

• SQL injection

<0.0.0-20260420155735-b596b0882620 · fixed in 0.0.0-20260420155735-b596b0882620

Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

• SQL injection

<4.5.4 · fixed in 4.5.4

SQL injection in Zeon Academy Pro by Zeon Global Tech

• Zeon Global Tech Zeon Academy Pro
• SQL injection

Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter

• tholstkabelbwde Plugin: CMS für Motorrad Werkstätten
• SQL injection

Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization

• SQL injection

>=0.1.0, <0.6.1 · fixed in 0.6.1

Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection

• Metasoft 美特软件 MetaCRM
• Other injection
• SQL injection

phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection

• phili67 Ecclesia CRM
• Other injection
• SQL injection

Digiwin｜EasyFlow .NET - SQL Injection

• Digiwin EasyFlow .NET
• SQL injection

Digiwin｜EasyFlow .NET - SQL Injection

• Digiwin EasyFlow .NET
• SQL injection

ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection

• ProjectsAndPrograms School Management System
• Other injection
• SQL injection

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgot-password.php).

• SQL injection

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (forgot-password.php).

• SQL injection

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page (index.php).

• SQL injection

dameng100 muucmf index.html getListByPage sql injection

• dameng100 muucmf
• Other injection
• SQL injection

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

• SQL injection

<1.13.1 · fixed in 1.13.1

YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()

• SQL injection

<4.6.1 · fixed in 4.6.1

ChurchCRM has Authenticated SQL Injection in `/api/families/byCheckNumber/{scanString}`

• CRM
• SQL injection

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

• SQL injection

<4.5.149 · fixed in 4.5.149

WeGIA has SQL Injection via Session Variable Override in DespachoControle.php

• LabRedesCefetRJ WeGIA
• SQL injection
• CWE-302

QueryMine sms GET Request Parameter deletecourse.php sql injection

• QueryMine sms
• Other injection
• SQL injection

QueryMine sms GET Request Parameter editcourse.php sql injection

• QueryMine sms
• Other injection
• SQL injection

Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server

• Sparx Systems Pty Ltd. Sparx Pro Cloud Server
• SQL injection
• Information disclosure

SQL injection in CubeCart

• CubeCart
• SQL injection

Tutor LMS <= 3.9.8 - Authenticated (Admin+) SQL Injection via 'date' Parameter

• themeum Tutor LMS – eLearning and online course solution
• SQL injection

Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter

• Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
• SQL injection

MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters

• stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education
• SQL injection

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

• SQL injection

Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)

• SQL injection

<1.4.6 || >=1.5.0-beta.0, <1.5.6 || >=1.6.0-alpha.0, <1.6.0-beta.5 · fixed in 1.4.6, 1.5.6, 1.6.0-beta.5

DataEase has SQL Injection via Stacked Queries

• dataease
• SQL injection

DataEase SQL Injection Vulnerability

• dataease
• SQL injection

DataEase has SQL Injection via Datasource Management

• dataease
• SQL injection

DataEase has SQL Injection via Datasource Save Flow

• dataease
• SQL injection

DataEase has SQL Injection through its getFieldEnumObj Endpoint

• dataease
• SQL injection

DataEase has SQL Injection in Order By Clause

• dataease
• SQL injection

DataEase: SQL Injection in v2 Dataset Export

• dataease
• SQL injection

SQL Injection

• Zohocorp ManageEngine PAM360
• Zohocorp ManageEngine Password Manager Pro
• SQL injection

DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages'

• designinvento DirectoryPress – Business Directory And Classified Ad Listing
• SQL injection

Accessibility Suite by Ability, Inc <= 4.20 - Authenticated (Subscriber+) SQL Injection via 'scan_id' Parameter

• onlineada Accessibility Suite by Ability, Inc
• SQL injection

Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data

• imprintnext Riaxe Product Customizer
• SQL injection

SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php.

• SQL injection

SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=.

• SQL injection

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.

• SQL injection

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php.

• SQL injection

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_user.php.

• SQL injection

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php.

• SQL injection

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php.

• SQL injection

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.

• SQL injection

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.

• SQL injection