Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.6 High
Authenticated SQL Injection in PHP Jabbers scripts
- PHP Jabbers Appointment Scheduler
- PHP Jabbers Bus Reservation System
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Unauthenticated SQL Injection in PHP Jabbers - Car Rental Script script
- PHP Jabbers Car Rental Script
- SQL injection
- CVSS 8.6 High
Kirki < 6.0.13 - Unauthenticated SQL Injection
- Kirki
- SQL injection
- CVSS 3.7 Low
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter
- WP Go Maps
- SQL injection
- CVSS 8.1 High
Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
- Product Feed Manager For WooCommerce
- SQL injection
- CVSS 6.5 Medium
Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters
- Check & Log Email
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id.
- SQL injection
- CVSS 4.7 Medium
Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
- clastix kamaji
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SQLi in UMAI Vision's Traffic Analysis System
- UMAI Vision Traffic Analysis System
- SQL injection
- CVSS 8.7 High
CentreStack < 17.4 SQL Injection via x-glad-filter Header
- Gladinet CentreStack
- SQL injection
- CVSS 8.1 High
SQL injection in ext-pgsql via E'...' backslash breakout
- PHP
- SQL injection
- CVSS 8.6 High
SQL injection in Eaton PADM
- Eaton PADM
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection in WebPros Plesk
- WebPros Plesk
- SQL injection
- CVSS 8.6 High
Bookly < 27.8 - Unauthenticated SQL Injection via staff_id
- Online Scheduling and Appointment Booking System
- SQL injection
- CVSS 6.8 Medium
WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search
- WP Hotel Booking
- SQL injection
- CVSS 6.5 Medium
Improved Save Button <= 1.2.1 - Authenticated (Author+) Second-Order SQL Injection via 'meta_key' Parameter
- labelblanc Improved Save Button
- SQL injection
- CVSS 8.6 High
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Campaign Classic
- SQL injection
- CVSS 7.1 High
SQL injection in LG Electronics SmartShare
- LG Electronics SmartShare
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenue_report.php via the fromDate parameter.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_membership.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /print_membership_card.php?id=1.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.
- SQL injection
- CVSS 8.8 High
DriveLock SQL Injection Privilege Escalation Vulnerability
- DriveLock
- SQL injection
- CVSS 8.7 High
SQL Injection in Coverity Connect SOAP API
- Black Duck Coverity Connect
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
- balbooa.com Gridbox extension for Joomla
- SQL injection
- CVSS 5.1 Medium
Blind SQL Injection in Quick.CMS
- OpenSolution Quick.CMS
- SQL injection
- CVSS 7.1 High
SQL Injection in Frappe's ERPNext
- Frappe ERPNext
- SQL injection
- CVSS 4.9 Medium
WP-Lister Lite for eBay <= 3.8.8 - Authenticated (Shop Manager+) SQL Injection via 'orderby' Parameter
- wp-lab WP-Lister Lite for eBay
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection and unsafe deserialisation vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection and unsafe deserialisation vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection and unsafe deserialisation vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 8.1 High
Post-authentication SQL injection vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Pre-authentication error-based SQL injection vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Pre-authentication blind SQL injection vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 4.9 Medium
WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter
- opajaap WP Photo Album Plus
- SQL injection
- CVSS 7.3 High
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.
- SQL injection
- CVSS 7.3 High
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.
- SQL injection
- CVSS 7.3 High
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.
- SQL injection
- CVSS 7.3 High
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter status.
- SQL injection
- CVSS 7.3 High
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_class.
- SQL injection
- CVSS 7.3 High
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection.
- SQL injection
- CVSS 7.3 High
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter new_password.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution
- SQL injection
<2.5.1 · fixed in 2.5.1
GHSA-6wcc-39rp-hh9p · CVE-2026-54658 - CVSS 9.4 CriticalCritical · CVSS 9+
Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance
- Ellucian Advance Web
- Ellucian Legacy Advance
- SQL injection
- CVSS 6.3 Medium
Tanium addressed a SQL injection vulnerability in Patch.
- Tanium Patch
- SQL injection
- CVSS 6.5 Medium
Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection
- foomagoo Plugin Organizer
- SQL injection
- CVSS 8.1 High
SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- SQL injection