SQL injection.

Mautic has SQL Injection in API Contact Filtering

• SQL injection

>=2.6.0, <=4.4.13 || >=5.0.0, <5.2.11 || >=6.0.0, <6.0.9 || >=7.0.0, <7.1.2 · fixed in 5.2.11, 6.0.9, 7.1.2

Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read

• Path traversal
• SQL injection

<0.64.0 · fixed in 0.64.0

Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do

• Shenzhen Landray Software Co., Ltd. Landry Office Automation (OA)
• SQL injection

SQL injection in Ubiquiti Inc UniFi Protect Application

• Ubiquiti Inc UniFi Protect Application
• SQL injection

SQL injection in Ubiquiti Inc UniFi Talk Application

• Ubiquiti Inc UniFi Talk Application
• SQL injection

SQL injection in Ubiquiti Inc UniFi OS Server and others

• Ubiquiti Inc UniFi OS Server
• Ubiquiti Inc Dream Machines
• SQL injection

Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS

• Progress Software Flowmon ADS
• SQL injection

WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability

• Levelfourdevelopment WP EasyCart
• SQL injection

WordPress nicen-localize-image plugin <= 1.4.9 - SQL Injection vulnerability

• 友人a丶 nicen-localize-image
• SQL injection

WordPress iNET Webkit plugin 1.2.4 - SQL Injection vulnerability

• iNET Webkit
• SQL injection

WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability

• Hiroaki Miyashita Custom Field Template
• SQL injection

WordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerability

• Epsiloncool WP Fast Total Search
• SQL injection

WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability

• Ahmadgb GeekyBot
• SQL injection

WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability

• ThemeMove Unicamp
• SQL injection

WP Review Slider Pro <= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter

• https://wpreviewslider.com/ WP Review Slider Pro
• SQL injection

Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter

• trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation
• SQL injection

Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

• propertyhive Houzez Property Feed
• SQL injection

Cargo Extension: SQLi in Special:Drilldown

• The Wikimedia Foundation Mediawiki - Cargo Extension
• SQL injection

SQLi in Cargo extension via year range filter

• The Wikimedia Foundation Mediawiki - Cargo Extension
• SQL injection

Guardian Language-System SQL Injection via id Parameter in translate_text.php

• guardian language-system
• SQL injection

Guardian Language-System SQL Injection via name Parameter in designer.php

• guardian language-system
• SQL injection

Guardian Language-System SQL Injection via id Parameter in subtitles.php

• guardian language-system
• SQL injection

Guardian Language-System SQL Injection via id Parameter in job_info_get.php

• guardian language-system
• SQL injection

Guardian Language-System SQL Injection via id Parameter in text_file.php

• guardian language-system
• SQL injection

Guardian Language-System SQL Injection via id Parameter in media.php

• guardian language-system
• SQL injection

Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info.php

• guardian language-system
• SQL injection

Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

• Control Web Panel
• SQL injection

MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter

• jetmonsters MotoPress Appointment Booking
• SQL injection

BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter

• Repute Infosystems BookingPress Appointment Booking Pro
• SQL injection

Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter

• Taskbuilder – Project Management & Task Management Tool With Kanban Board
• SQL injection

Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter

• Taskbuilder – Project Management & Task Management Tool With Kanban Board
• SQL injection

SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component

• SQL injection

SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information via the the __sort_type URL parameter on…

• SQL injection

SQL Injection in StoneFly Storage Concentrator

• StoneFly Storage Concentrator
• StoneFly Storage Concentrator Virtual Machine
• SQL injection

Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints

• dolibarr
• SQL injection

Apache Gravitino JDBC configuration validation bypass can allow file reads or truncation

• SQL injection

>=0.5.0, <1.0.0 · fixed in 1.0.0

SQLi in Exagate's SYSGUARD 6001

• Eksagate Electronic Engineering and Computer Industry Trade Inc. SYSGUARD 6001
• SQL injection

DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers

• EXODIST DBIx::QuickORM
• SQL injection

SQL Injection in Redeight CMS

• Redeight CMS
• SQL injection

EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter

• EventON (Pro) - WordPress Virtual Event Calendar Plugin
• SQL injection

SQL Injection in Raytha CMS

• Raytha
• SQL injection

SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter

• signoz
• SQL injection

Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands

• Snowflake CLI
• SQL injection

Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters

• Snowflake CLI
• SQL injection

Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input

• Snowflake CLI
• SQL injection

itsourcecode Hospital Management System patientchangepassword.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System patientdetail.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System insertbillingrecord.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

weng-xianhu EyouCMS API index.php sql injection

• weng-xianhu EyouCMS
• Other injection
• SQL injection

FrontAccounting < 2.4.20 SQL Injection via rep601.php

• FrontAccounting
• SQL injection
• Weak cryptography or TLS

FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php

• FrontAccounting
• SQL injection

FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions()

• FrontAccounting
• SQL injection

SourceCodester Class and Exam Timetabling System preview3.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System edit_class1.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

ormar is vulnerable to SQL Injection through aggregate functions min() and max()

• SQL injection

>=0.9.9, <0.23.0 · fixed in 0.23.0

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

• SQL injection

>=1.27.0, <35.8.5 || >=36.0.0, <38.5.5 || >=39.0.0, <39.4.2 || >=40.0.0, <40.1.1 · fixed in 35.8.5, 38.5.5, 39.4.2, 40.1.1

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

• SQL injection

>=1.30.0, <35.8.5 || >=36.0.0, <38.5.5 || >=39.0.0, <39.4.2 || >=40.0.0, <40.1.1 · fixed in 35.8.5, 38.5.5, 39.4.2, 40.1.1

PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

• SQL injection

<4.5.90 · fixed in 4.5.90

SciTokens is vulnerable to SQL Injection in KeyCache

• SQL injection

<1.9.6 · fixed in 1.9.6

postgraas-server vulnerable to SQL injection

• SQL injection

<2.0.0 · fixed in 2.0.0