SQL injection.

Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameter

• Koha
• SQL injection

WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

• emarket-design Customer Support Ticket System & Helpdesk
• SQL injection

CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection

• CodeAstro Human Resource Management System
• Other injection
• SQL injection

Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

• SQL injection
• Information disclosure

<4.84.2 · fixed in 4.84.2

Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint

• SQL injection
• Information disclosure

<4.84.2 · fixed in 4.84.2

TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework

• SQL injection
• Broken access control

>=14.0.0, <14.3.3 · fixed in 14.3.3

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and ...

• SQL injection

<=3.3.18 · no fixed version yet

Frappe Vulnerable to Possible SQL Injection via get_blog_list

• frappe
• SQL injection

SQL injection in phpBB

• phpBB
• SQL injection

ClipBucket: Blind SQL Injection in progress_video.php

• MacWarrior clipbucket-v5
• SQL injection

ClipBucket: Blind SQL Injection in subtitle_edit.php

• MacWarrior clipbucket-v5
• SQL injection

WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability

• WBW Plugins Product Filter by WBW
• SQL injection

WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

• Beardev JoomSport
• SQL injection

PostgreSQL Anonymizer: SQL injection in the rules import functions

• DALIBO PostgreSQL Anonymizer
• SQL injection

SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ezform.php (line 14)…

• SQL injection

Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands

• SQL injection

<0.13.5 · fixed in 0.13.5

Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search

• nationalsecurityagency ghidra
• SQL injection

Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username

• nationalsecurityagency ghidra
• SQL injection

Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter

• contrid Newsletters
• SQL injection

XStore < 9.7.3 - Unauthenticated SQLi

• Xstore
• SQL injection

LimeSurvey has a SQL Injection issue

• SQL injection

<=7.0.0-beta1 · no fixed version yet

SQLi in MOSK Informatics' CBS Platform

• MOSK Information Technologies Ltd. CBS Platform
• SQL injection

SQLi in Netcad's E-İmar

• Netcad Software Inc. E-İmar
• SQL injection

WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection

• Apptha Slider Gallery
• SQL injection

WordPress Plugin PICA Photo Gallery 1.0 SQL Injection

• Apptha PICA Photo Gallery
• SQL injection

KittyCatfish 2.2 Plugin for WordPress SQL Injection

• Missilesilo KittyCatfish
• SQL injection

Wow Viral Signups 2.1 WordPress Plugin SQL Injection

• Wow-Company Wow Viral Signups
• SQL injection

Wow Forms WordPress Plugin 2.1 SQL Injection

• Wow-Company Wow Forms
• SQL injection

WordPress Car Park Booking Plugin SQL Injection via space_id

• gurutechteam Car Park Booking WordPress Plugin
• SQL injection

Product Catalog 8 1.2 Plugin WordPress SQL Injection

• EvWill Product Catalog 8
• SQL injection

Single Personal Message 1.0.3 WordPress Plugin SQL Injection

• Md. Shamim Shahnewaz Single Personal Message
• SQL injection

Simply Poll 1.4.1 Plugin for WordPress SQL Injection

• Ollie Armstrong Simply Poll
• SQL injection

SQL injection in Nemon products

• Nemon Trade Energy
• Nemon Trade Energy CRM
• SQL injection

SQL Injection vulnerability in SAP S/4HANA

• SAP_SE SAP S/4HANA
• SQL injection

FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString

• SQL injection

<=1.1.14-1243 · no fixed version yet

CodeAstro Student Attendance Management System createClassArms.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Student Attendance Management System createClass.php edit sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Student Attendance Management System createClass.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Student Attendance Management System index.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Payroll System view_account.php sql injection

• CodeAstro Payroll System
• Other injection
• SQL injection

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

• Other injection
• SQL injection

<0.3.0 · fixed in 0.3.0

CodeAstro Payroll System home_salary.php sql injection

• CodeAstro Payroll System
• Other injection
• SQL injection

imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection

• imvks786 student_management_system
• Other injection
• SQL injection

imvks786 student_management_system Login index.ph sql injection

• imvks786 student_management_system
• Other injection
• SQL injection

itsourcecode Hospital Management System addpatient.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System adminaccount.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

CodeAstro Leave Management System add_leave.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System search_staff_for_updation.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System delete_leave_type.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System search_staff_for_deletion.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection

• SourceCodester Hospitals Patient Records Management System
• Other injection
• SQL injection

CodeAstro Ingredients Stock Management System add_stock.php sql injection

• CodeAstro Ingredients Stock Management System
• Other injection
• SQL injection

code-projects Online Music Site Search.php sql injection

• code-projects Online Music Site
• Other injection
• SQL injection

code-projects Online Music Site AdminDeleteAlbum.php sql injection

• code-projects Online Music Site
• Other injection
• SQL injection

code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection

• code-projects Simple Flight Ticket Booking System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive1.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive2.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive3.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive4.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection