Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 10.0 CriticalCritical · CVSS 9+
llama-index-packs-finchat SQL Injection vulnerability
- SQL injection
<=0.3.0 · no fixed version yet
GHSA-x48g-hm9c-ww42 · CVE-2024-12909 - CVSS 6.9 Medium
code-projects Real State Services single-list_sale.php add sql injection
- code-projects Real State Services
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online Hotel Management System controller.php add sql injection
- itsourcecode Online Hotel Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Online Hotel Management System controller.php edit sql injection
- itsourcecode Online Hotel Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Baptism Information Management System editBaptism.php sql injection
- itsourcecode Baptism Information Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Baptism Information Management System delbaptism.php sql injection
- itsourcecode Baptism Information Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System doctortimings.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System doctorprofile.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System doctorchangepassword.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection
- CodeAstro Human Resource Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System departmentDoctor.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System department.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 6.3 Medium
YzmCMS index.php sql injection
- YzmCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System preview4.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System edit_class.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 5.3 Medium
CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection
- CodeAstro Human Resource Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System preview5.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 8.7 High
Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1
- joomcoder.com JoomCCK extension for Joomla
- SQL injection
- CVSS 6.9 Medium
yashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection
- yashpokharna2555 restaurent-management-system
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System appointment.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System ajaxmedicine.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
itsourcecode Hospital Management System adminprofile.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System preview7.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System archive.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System preview6.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System preview.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.5 Medium
Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter
- trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation
- SQL injection
- CVSS 6.5 Medium
Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter
- trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
OpenProject: SQL injection in timestamps functionality
- opf openproject
- SQL injection
- CVSS 8.5 High
WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability
- Adrian Tobey Groundhogg
- SQL injection
- CVSS 8.5 High
WordPress Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.2.7 - SQL Injection vulnerability
- Igor Benic Recipe Maker For Your Food Blog from Zip Recipes
- SQL injection
- CVSS 8.5 High
WordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability
- Wasiliy Strecker Contest Gallery
- SQL injection
- CVSS 8.5 High
WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability
- wpjobportal WP Job Portal
- SQL injection
- CVSS 8.5 High
WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability
- jetmonsters Restaurant Menu by MotoPress
- SQL injection
- CVSS 8.5 High
WordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability
- AF themes WP Post Author
- SQL injection
- CVSS 8.5 High
WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability
- bestwebsoft Gallery
- SQL injection
- CVSS 8.5 High
WordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability
- Tomdever wpForo Forum
- SQL injection
- CVSS 7.6 High
WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability
- Ays Pro Popup box
- SQL injection
- CVSS 7.6 High
WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability
- WP All Import
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability
- ThemeHunk Advance Product Search
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerability
- Crocoblock. Jetimpex Inc. JetSmartFilters
- SQL injection
- CVSS 8.5 High
WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability
- Themefic Tourfic
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Quotes llama plugin <= 3.1.5 - SQL Injection vulnerability
- oooorgle Quotes llama
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress 워드프레스 결제 심플페이 plugin <= 5.5.6 - SQL Injection vulnerability
- codemstory 워드프레스 결제 심플페이
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Library Management System plugin <= 3.5.7 - SQL Injection vulnerability
- Online Web Tutor Library Management System
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability
- AyeCode Ltd GeoDirectory
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability
- contempoinc Real Estate 7
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability
- TMS wpDataTables
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerability
- Crocoblock. Jetimpex Inc. JetBooking
- SQL injection
- CVSS 6.5 Medium
Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter
- trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation
- SQL injection
- CVSS 7.2 High
Cacti: SQL Injection in managers.php
- cacti
- SQL injection
- CVSS 1.6 Low
SQL Injection in Nessus via Malicious Scan Result File Import
- tenable Nessus
- SQL injection
- CVSS 2.1 Low
SQL Injection in Nessus via Reverse DNS Lookup
- tenable Nessus
- SQL injection
- CVSS 7.5 High
WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability
- YMC Filter
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability
- Premmerce Wishlist for WooCommerce
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability
- PluginUs.Net MDTF
- SQL injection