SQL injection.

code-projects Employee Management System changepassemp.php sql injection

• code-projects Employee Management System
• Other injection
• SQL injection

SourceCodester Simple POS and Inventory System search.php sql injection

• SourceCodester Simple POS and Inventory System
• Other injection
• SQL injection

SourceCodester Simple POS and Inventory System edit_customer.php sql injection

• SourceCodester Simple POS and Inventory System
• Other injection
• SQL injection

SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection

• SourceCodester Simple POS and Inventory System
• Other injection
• SQL injection

SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection

• SourceCodester Indian Invoicing System
• Other injection
• SQL injection

itsourcecode Electronic Judging System login.php sql injection

• itsourcecode Electronic Judging System
• Other injection
• SQL injection

projectworlds Online Art Gallery Shop adminHome.php sql injection

• projectworlds Online Art Gallery Shop
• Other injection
• SQL injection

SourceCodester Hospitals Patient Records Management System manage_history.php sql injection

• SourceCodester Hospitals Patient Records Management System
• Other injection
• SQL injection

SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection

• SourceCodester Hospitals Patient Records Management System
• Other injection
• SQL injection

SourceCodester Hospitals Patient Records Management System view_history.php sql injection

• SourceCodester Hospitals Patient Records Management System
• Other injection
• SQL injection

WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id

• ultimate-form-builder-lite Ultimate Form Builder Lite
• SQL injection

Joomla! Component EkRishta 2.10 SQL Injection via username

• harmistechnology EkRishta
• SQL injection

Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail

• harmistechnology Ek Rishta
• SQL injection

WordPress Contact Form Maker Plugin 1.12.20 SQL Injection

• web-dorado Contact Form Maker
• SQL injection

WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php

• 10Web Form Maker
• SQL injection

Smartshop 1 SQL Injection via search.php

• Behance Smartshop
• SQL injection

Smartshop 1 SQL Injection via product.php id Parameter

• Behance Smartshop
• SQL injection

Smartshop 1 SQL Injection via category.php

• Behance Smartshop
• SQL injection

QuantumNous new-api self Endpoint topup.go SearchAllTopUps sql injection

• QuantumNous new-api
• Other injection
• SQL injection

RT: SQL injection via entry_aggregator parameter in JSON search

• bestpractical rt
• SQL injection

YesWiki: Unauthenticated SQL Injection

• SQL injection

<4.6.4 · fixed in 4.6.4

SQL Injection in STER

• Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy STER
• SQL injection

WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter

• weDevs WP ERP Pro
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter

• Open ISES Tickets
• SQL injection

Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters

• Open ISES Tickets
• SQL injection

WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability

• WP Directory Kit
• SQL injection

SQL injection in MySQL CNID backend

• Netatalk
• SQL injection

Drupal Core has a SQL Injection issue

• SQL injection

>=8.9.0, <10.4.10 || >=10.5.0, <10.5.10 || >=10.6.0, <10.6.9 || >=11.0.0, <11.1.10 || >=11.2.0, <11.2.12 || >=11.3.0, <11.3.10 · fixed in 10.4.10, 10.5.10, 10.6.9, 11.1.10, 11.2.12, 11.3.10

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability

• YITH WooCommerce Product Add-Ons
• SQL injection

Surecart - SQL Injection

• brainstormforce Surecart
• SQL injection

NextGEN Gallery - SQL Injection

• awesomemotive NextGEN Gallery
• SQL injection

TONNET｜E-LAN Hybrid Recording System - SQL Injection

• TONNET TPR7308
• SQL injection

Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

• PixelYourSite Boost
• SQL injection

Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

• edmonparker Read More & Accordion
• SQL injection

Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Unauthenticated SQL Injection via 'checkout_uuid' Parameter

• constantcontact Creative Mail – Easier WordPress & WooCommerce Email Marketing
• SQL injection

Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter

• Infility Global
• SQL injection

SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.

• SQL injection

BillaBear is Vulnerable to SQL Injection in the EventRepository

• SQL injection

<=2025.01.03 · no fixed version yet

georgringer/news has SQL Injection in extension "News system" (news)

• SQL injection

<10.0.4 || >=11.0.0, <11.4.4 || >=12.0.0, <12.3.2 || >=13.0.0, <13.0.2 || >=14.0.0, <14.0.3 · fixed in 10.0.4, 11.4.4, 12.3.2, 13.0.2, 14.0.3

TYPO3 SQL Injection in extension "Address List" (tt_address)

• SQL injection

<8.1.2 || >=9.0.0, <9.1.1 || >=10.0.0, <10.0.1 · fixed in 8.1.2, 9.1.1, 10.0.1

Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection

• contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe
• SQL injection

SOGo < 5.12.8 SQL Injection via addUserInAcls endpoint

• Alinto SOGo Webmail
• SQL injection

WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter

• WP Photo Album Plus
• SQL injection

projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

• projectworlds hospital-management-system-in-php
• Other injection
• SQL injection

org.linlinjava:litemall-wx-api has an Injection issue

• Other injection
• SQL injection

<=0.1.0 · no fixed version yet

linlinjava litemall Admin Endpoint sql injection

• linlinjava litemall
• Other injection
• SQL injection

Zechat 1.5 SQL Injection via v parameter (time-based blind)

• Bylancer Zechat
• SQL injection

Zechat 1.5 SQL Injection via hashtag parameter

• Bylancer Zechat
• SQL injection

Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection

• nordex-online N149 Wind Turbine Web Server
• SQL injection

Joomla! EkRishta 2.10 Persistent XSS and SQL Injection

• Joomlaextensions Joomla! extension EkRishta
• SQL injection

Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php

• wende60 Redaxo CMS Addon MyEvents
• SQL injection

Oinone Pamirs queryListByWrapper RSQLToSQLNodeConnector.makeVariable sql injection

• Oinone Pamirs
• Other injection
• SQL injection