Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.5 High
WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability
- Rymera Web Co WC Vendors Marketplace
- SQL injection
- CVSS 8.5 High
WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability
- SALESmanago & Leadoo
- SQL injection
- CVSS 7.5 High
Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter
- themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin
- SQL injection
- CVSS 6.5 Medium
Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'
- GravityMore Gravity Bookings
- SQL injection
- CVSS 7.5 High
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
- wedevs Dokan Pro
- SQL injection
- CVSS 6.5 Medium
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
- wedevs Dokan Pro
- SQL injection
- CVSS 7.7 High
GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/search_products.php.
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 7.6 High
Cacti: Stored SQL Injection via graph_name_regexp in Reports feature
- cacti
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 8.8 High
Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
- Quest NetVault Backup
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Cacti has SQL Injection via rfilter parameter in RLIKE clauses
- cacti
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php
- cacti
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php
- cacti
- SQL injection
- CVSS 7.6 High
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability
- Funnel Builder by FunnelKit
- SQL injection
- CVSS 7.5 High
ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection
- ClearSale Total
- SQL injection
- CVSS 7.5 High
WP Forms Connector <= 1.8 - Unauthenticated SQL Injection via 'order' Parameter
- hancock11 WP Forms Connector
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Budibase has nonymous NoSQL operator injection via published-app query templates
- SQL injection
- Other injection
<3.39.12 · fixed in 3.39.12
GHSA-8qv3-p479-cj62 · CVE-2026-54350 - CVSS 8.3 High
SQL injection in Revive Adserver
- Revive Adserver
- SQL injection
- CVSS 6.5 Medium
SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues component
- SQL injection
- CVSS 7.5 High
An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- Denial of service
- CVSS 7.5 High
An issue in the t_set_push component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the sslr_qst_get component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- Denial of service
- CVSS 7.5 High
An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the st_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the sqlo_tb_col_preds component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the sqlo_natural_join_cond component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the sqlo_strip_in_join component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the sqlo_key_part_best component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.5 High
An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- SQL injection
- CVSS 7.1 High
Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.ts
- Cap-go capgo
- SQL injection
- CVSS 8.1 High
SQL injection in Dell Wyse Management Suite (WMS)
- Dell Wyse Management Suite (WMS)
- SQL injection
- CVSS 8.8 High
SQL injection in Dell Wyse Management Suite (WMS)
- Dell Wyse Management Suite (WMS)
- SQL injection
- CVSS 6.0 Medium
IBM Sterling File Gateway SQL Injection
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- SQL injection
- CVSS 8.1 High
Apache Doris MCP Server is vulnerable to SQL Injection via metadata query path
- SQL injection
<0.6.1 · fixed in 0.6.1
GHSA-pqrj-4gwg-h5f7 · CVE-2025-66336 - CVSS 5.1 Medium
ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection
- ILIAS Learning Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Montodel House-Rental-Management index.php houses sql injection
- Montodel House-Rental-Management
- Other injection
- SQL injection
- CVSS 6.9 Medium
Montodel House-Rental-Management login.php sql injection
- Montodel House-Rental-Management
- Other injection
- SQL injection
- CVSS 5.9 Medium
TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)
- SQL injection
>=0.1.12, <0.3.29 · fixed in 0.3.29
GHSA-9ggv-8w38-r7pm - CVSS 7.1 High
Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_id
- Joomboost JoomCRM
- SQL injection
- CVSS 7.1 High
Joomla! Component vBizz 1.0.7 SQL Injection
- Wdmtech vBizz
- SQL injection
- CVSS 7.1 High
Joomla vWishlist 1.0.1 SQL Injection via vproductid Parameter
- Wdmtech vWishlist
- SQL injection
- CVSS 8.8 High
Joomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboard
- Wdmtech vAccount
- SQL injection
- CVSS 8.8 High
Joomla vReview 1.9.11 SQL Injection via editReview
- Wdmtech vReview
- SQL injection
- CVSS 8.8 High
Joomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout
- Wdmtech vRestaurant
- SQL injection
- CVSS 8.8 High
Joomla! Component VMap 1.9.6 SQL Injection via loadmarker
- Wdmtech VMap
- SQL injection
- CVSS 8.8 High
Joomla! Component J-BusinessDirectory 4.9.7 SQL Injection
- Cmsjunkie J-BusinessDirectory
- SQL injection
- CVSS 8.8 High
Joomla J-ClassifiedsManager 3.0.5 SQL Injection
- Cmsjunkie ClassifiedsManager
- SQL injection
- CVSS 8.8 High
Joomla J-MultipleHotelReservation 6.0.7 SQL Injection
- Cmsjunkie MultipleHotelReservation
- SQL injection
- CVSS 7.1 High
Joomla J-CruisePortal 6.0.4 SQL Injection via cruises
- Cmsjunkie J-CruisePortal
- SQL injection
- CVSS 8.8 High
Joomla JHotelReservation 6.0.7 SQL Injection via search-hotels
- Cmsjunkie JHotelReservation
- SQL injection
- CVSS 8.8 High
Joomla! Component jCart for OpenCart 2.0 SQL Injection
- Soft-Php jCart for OpenCart
- SQL injection
- CVSS 8.8 High
Joomla! Component Extra Search 2.2.8 SQL Injection
- Joomlaboat Extra Search
- SQL injection
- CVSS 8.8 High
Joomla Component Myportfolio 3.0.2 SQL Injection via pid Parameter
- Myportfolio
- SQL injection
- CVSS 8.8 High
Joomla Payage 2.05 SQL Injection via aid Parameter
- Extensions Joomla Payage
- SQL injection