Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability
- WP Directory Kit
- SQL injection
- CVSS 5.3 Medium
itsourcecode Content Management System edit_topic.php sql injection
- itsourcecode Content Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Computer Repair Shop Management System manage_product.php sql injection
- SourceCodester Computer Repair Shop Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Real State Services Login loginuser.php sql injection
- code-projects Real State Services
- Other injection
- SQL injection
- CVSS 6.9 Medium
CodeAstro Online Job Portal application_status.php sql injection
- CodeAstro Online Job Portal
- Other injection
- SQL injection
- CVSS 6.9 Medium
CodeAstro Online Job Portal delete-jobs.php sql injection
- CodeAstro Online Job Portal
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Content Management System add_sub_topic.php sql injection
- itsourcecode Content Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Content Management System update_ss_img.php sql injection
- itsourcecode Content Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Content Management System save_comment.php sql injection
- itsourcecode Content Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online House Rental System manage_payment.php sql injection
- itsourcecode Online House Rental System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online House Rental System manage_tenant.php sql injection
- itsourcecode Online House Rental System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online House Rental System ajax.php login sql injection
- itsourcecode Online House Rental System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online Blood Bank Management System campsdetails.php sql injection
- itsourcecode Online Blood Bank Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online Blood Bank Management System viewrequest.php sql injection
- itsourcecode Online Blood Bank Management System
- Other injection
- SQL injection
- CVSS 8.7 High
Multiple SQL Injections in SOPlanning
- SOPlanning
- SQL injection
- CVSS 5.3 Medium
itsourcecode Content Management System instructions.php sql injection
- itsourcecode Content Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Water Billing Management System User Management manage_user sql injection
- SourceCodester Water Billing Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Ingredients Stock Management System stock_manager.php sql injection
- CodeAstro Ingredients Stock Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
raisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injection
- raisulislamg4 student_management_system_by_php
- Other injection
- SQL injection
- CVSS 6.9 Medium
raisulislamg4 student_management_system_by_php delete.php sql injection
- raisulislamg4 student_management_system_by_php
- Other injection
- SQL injection
- CVSS 6.9 Medium
raisulislamg4 student_management_system_by_php Login login_check.php sql injection
- raisulislamg4 student_management_system_by_php
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection
- code-projects Online Hospital Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Online Hospital Management System login_1.php login_user sql injection
- code-projects Online Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS JSON Query SysUserController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS JSON Query SystemParamController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS JSON Query SystemDictController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS ComnController ComnController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Online Hospital Management System patient.php sql injection
- code-projects Online Hospital Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Hospitals Patient Records Management System Users.php save sql injection
- SourceCodester Hospitals Patient Records Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Hospitals Patient Records Management System Users.php delete sql injection
- SourceCodester Hospitals Patient Records Management System
- Other injection
- SQL injection
- CVSS 8.6 High
OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column
- OpenCATS
- SQL injection
- CVSS 8.4 High
OpenCATS - SQL Injection in DataGrid sortDirection Parameter
- OpenCATS
- SQL injection
- CVSS 6.9 Medium
code-projects Online Music Site AdminEditAlbum.php sql injection
- code-projects Online Music Site
- Other injection
- SQL injection
- CVSS 5.3 Medium
Aider-AI Aider Code Generation Workflow sql injection
- Aider
- Other injection
- SQL injection
- CVSS 5.1 Medium
code-projects Online Music Site AdminUpdateAlbum.php sql injection
- code-projects Online Music Site
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Visitor Management System phone_0.php sql injection
- code-projects Visitor Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection
- Bdtask Multi-Store Inventory Management System
- Other injection
- SQL injection
- CVSS 8.8 High
Yot CMS 3.3.1 SQL Injection via aid and cid Parameters
- Yot CMS
- SQL injection
- CVSS 8.8 High
Gate Pass Management System 2.1 SQL Injection via login-exec.php
- Livebms Gate Pass Management System
- SQL injection
- CVSS 8.8 High
MOGG web simulator Script All Version SQL Injection via play.php
- spider312 MOGG web simulator Script
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via watch.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via genre.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via year.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via quality.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via country.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via director Parameter
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via actor.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
AiOPMSD Final 1.0.0 SQL Injection via search.php
- AiOPMSD Final
- SQL injection
- CVSS 8.8 High
MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php
- M-Gb MGB OpenSource Guestbook
- SQL injection
- CVSS 7.1 High
SIM-PKH 2.4.1 SQL Injection via media.php id Parameter
- Simpkh SIM-PKH
- SQL injection
- CVSS 8.8 High
eNdonesia Portal 8.7 SQL Injection via mod.php
- eNdonesia Portal
- SQL injection
- CVSS 8.8 High
eNdonesia Portal 8.7 SQL Injection via mod.php
- eNdonesia Portal
- SQL injection
- CVSS 8.8 High
eNdonesia Portal 8.7 SQL Injection via mod.php
- eNdonesia Portal
- SQL injection
- CVSS 7.5 High
GEO my WP <= 4.5.5 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters
- ninjew GEO my WP
- SQL injection
- CVSS 6.9 Medium
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
- sambitraj STUDENT-MANAGEMENT-SYSTEM
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Student Details Management System index.php sql injection
- code-projects Student Details Management System
- Other injection
- SQL injection
- CVSS 7.5 High
stigmem-node's Postgres schema identifier handling required defensive quoting
- SQL injection
<0.9.0a2 · fixed in 0.9.0a2
GHSA-9pc9-4crj-mhpj · CVE-2026-76240 - CVSS 8.2 High
AgenticMail API/storage and outbound relay hardening fixes
- SQL injection
- Broken access control
<0.9.32 · fixed in 0.9.32
GHSA-wjjv-3mj2-39hf · CVE-2026-47255 - CVSS 7.1 High
ezsystems/ezpublish-legacy has a SQL injection in dfscleanup
- SQL injection
=2019.03 · no fixed version yet
GHSA-xg9x-h37w-h3r3 · CVE-2026-38739 - CVSS 8.7 High
agno contains a SQL injection vulnerability
- SQL injection
<=2.6.5 · no fixed version yet
GHSA-82m5-3pcp-hccq · CVE-2026-10105