Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.0 High
Authenticated SQLi in accountstatus view
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 7.0 High
Authenticated SQLi in DevSerialReset function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 6.9 Medium
Authenticated SQLi in DevSerialReset function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 6.9 Medium
Authenticated SQLi in getAccountByID function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in sync_data24 task
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in _mb24confi_getDevice function function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in getAlarmProfiles function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in _mb24confi_getTagAlarm function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in _mb24api_getUserAccount function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in _mb24confi_getTagAlarm function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in getLiveValues
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in getLiveValues function
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in ssoabstractservice
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 8.7 High
Unauthenticated SQLi in userinfo Endpoint
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- SQL injection
- CVSS 4.9 Medium
EnvíaloSimple: Email Marketing y Newsletters <= 2.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
- dattateccom EnvíaloSimple: Email Marketing y Newsletters
- SQL injection
- CVSS 8.8 High
Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
- SQL injection
<1.7.18 || >=2.0.0-RC1, <2.3.6 · fixed in 1.7.18, 2.3.6
GHSA-h4ph-crvj-9h92 · CVE-2026-44741 - CVSS 8.7 High
Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration
- SQL injection
<11.5.17 || >=12.0.0-RC1, <12.3.6 || >=2026.1.0, <2026.1.2 · fixed in 11.5.17, 12.3.6, 2026.1.2
GHSA-3234-gxc3-pq6f · CVE-2026-44739 - CVSS 5.3 Medium
itsourcecode Courier Management System parcel_list.php sql injection
- itsourcecode Courier Management System
- Other injection
- SQL injection
- CVSS 6.5 Medium
OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component.
- SQL injection
- CVSS 5.3 Medium
SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components
- SQL injection
- CVSS 6.9 Medium
itsourcecode Courier Management System manage_user.php sql injection
- itsourcecode Courier Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Project Management System Login chk.php sql injection
- code-projects Project Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Student Transcript Processing System index.php sql injection
- itsourcecode Student Transcript Processing System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Student Transcript Processing System trans.php sql injection
- itsourcecode Student Transcript Processing System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Student Transcript Processing System index.php sql injection
- itsourcecode Student Transcript Processing System
- Other injection
- SQL injection
- CVSS 8.5 High
Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values
- chatwoot
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Twenty: SQL Injection via the timeZone field
- twenty
- Command injection
- SQL injection
- CVSS 6.9 Medium
Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder
- Joomla! Project Joomla! CMS
- SQL injection
- CVSS 6.9 Medium
Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags
- Joomla! Project Joomla! CMS
- SQL injection
- CVSS 4.3 Medium
Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
- IBM Cloud Pak for Data System - Cyclops
- SQL injection
- CVSS 8.6 High
OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery
- OpenKM Community Edition
- OpenKM Professional Edition
- SQL injection
- CVSS 6.9 Medium
Das Parking Management System 停车场管理系统 Search API Endpoint sql injection
- Das Parking Management System 停车场管理系统
- Other injection
- SQL injection
- CVSS 6.9 Medium
Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injection
- Das Parking Management System 停车场管理系统
- Other injection
- SQL injection
- CVSS 4.1 Medium
Authenticated Administrator Role-Based Access Control Bypass in Compliance
- checkpoint Quantum Security Management
- SQL injection
- CVSS 5.6 Medium
SQL injection issue in UserCheck Portal when DLP Software Blade is active
- checkpoint Quantum Security Gateway
- SQL injection
- CVSS 6.9 Medium
Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Leave Management System add_staff.php sql injection
- CodeAstro Leave Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System delete_judge.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System edit_team.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Electronic Judging System edit_judge.php sql injection
- itsourcecode Electronic Judging System
- Other injection
- SQL injection
- CVSS 5.3 Medium
xianrendzw EasyReport REST Endpoint execute sql injection
- xianrendzw EasyReport
- Other injection
- SQL injection
- CVSS 6.9 Medium
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection
- Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform
- Other injection
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability
- eMagicOne Store Manager
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
- Crocoblock JetEngine
- SQL injection
- CVSS 8.5 High
WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability
- Unlimited Elements For Elementor
- SQL injection
- CVSS 8.1 High
SQL injection in Roundcube Webmail
- Roundcube Webmail
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection
- yashpokharna2555 StudentManagementSystem
- Other injection
- SQL injection
- CVSS 6.6 Medium
SQL injection in Genetec Inc. Genetec Security Center
- Genetec Inc. Genetec Security Center
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection
- yashpokharna2555 StudentManagementSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 StudentManagementSystem success.php sql injection
- yashpokharna2555 StudentManagementSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection
- Tiandy Easy7 Integrated Management Platform
- Other injection
- SQL injection
- CVSS 7.1 High
Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters
- Extro Responsive Portfolio
- SQL injection
- CVSS 7.1 High
Joomla Component eXtroForms 2.1.5 SQL Injection via filter parameters
- eXtroForms
- SQL injection
- CVSS 8.8 High
Collectric CMU 1.0 SQL Injection via lang Parameter
- Ourenergy Collectric CMU
- SQL injection
- CVSS 8.8 High
MedDream PACS Server Premium 6.7.1.1 SQL Injection via email
- MedDream PACS Server Premium
- SQL injection
- CVSS 8.8 High
mooSocial Store Plugin 2.6 SQL Injection via product parameter
- mooSocial Store Plugin
- SQL injection
- CVSS 8.8 High
Twitter-Clone 1 SQL Injection via search.php
- Fyffe PHP-Twitter-Clone
- SQL injection
- CVSS 8.8 High
Twitter-Clone 1 SQL Injection via follow.php
- Fyffe PHP-Twitter-Clone
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System applyleaveprocess.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Employee Management System psubmit.php sql injection
- code-projects Employee Management System
- Other injection
- SQL injection