SQL injection.

Unauthenticated SQL Injection

• TBEA TLogger (TBEA Communication Box 3rd Generation)
• SQL injection

Metabase SQL injection via public card or dashboard

• Metabase
• SQL injection

Metabase SQL injection via password reset endpoint

• Metabase
• SQL injection

Discourse: Strip SQL comments and use non-recursive parameter interpolation in Data Explorer

• discourse
• SQL injection

ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php

• Razinsoft Ready eCommerce
• SQL injection

Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass

• Tencent APIJSON
• SQL injection

Apache Ranger: SQL Injection vulnerability in lookup functionality

• Apache Software Foundation Apache Ranger
• SQL injection

Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report

• vitepos
• SQL injection

ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter

• ProSolution WP Client
• SQL injection

ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie

• ProSolution WP Client
• SQL injection

Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup

• Term Pages
• SQL injection

Library Management System < 3.6.7 - Subscriber+ SQL Injection via Filter Value

• Library Management System
• SQL injection

SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection

• SourceCodester Simple Doctors Appointment System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection

• MingSoft MCMS
• Other injection
• SQL injection

lock-upme OPMS IN Clause message.go sql injection

• lock-upme OPMS
• Other injection
• SQL injection

dresende node-sql-query Request Parameter Select.js SelectQuery.build sql injection

• dresende node-sql-query
• Other injection
• SQL injection

itsourcecode Hospital Management System viewdoctor.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

code-projects Task Management System comment_count_user.php sql injection

• code-projects Task Management System
• Other injection
• SQL injection

code-projects Task Management System AdminLogin.php sql injection

• code-projects Task Management System
• Other injection
• SQL injection

CubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relation

• CubeWP Framework
• SQL injection

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter

• WP Directory Kit
• SQL injection

WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid

• Iptanus File Upload
• SQL injection

WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter

• WP Directory Kit
• SQL injection

SourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injection

• SourceCodester Simple Doctors Appointment System
• Other injection
• SQL injection

CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions

• SQL injection

>=4.3.0, <4.7.4 · fixed in 4.7.4

Frappe has potential SQL Injection due to missing validation

• frappe
• SQL injection

SQL injection in WebPros Plesk

• WebPros Plesk
• SQL injection

SourceCodester Photo Share Website ajax.php signup sql injection

• SourceCodester Photo Share Website
• Other injection
• SQL injection

SQL injection via the :comment option in Postgrex.stream/4

• SQL injection

>=0.19.3, <0.22.4 · fixed in 0.22.4

Content Views < 4.5 - Subscriber+ SQL Injection via preview_request

• Content Views
• SQL injection

SourceCodester Photo Share Website ajax.php login sql injection

• SourceCodester Photo Share Website
• Other injection
• SQL injection

itsourcecode Hospital Management System viewappointment.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewadmin.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System treatmentrecord.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System treatmentdetail.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System treatment.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

chiuwingyan house selectall.action sql injection

• chiuwingyan house
• Other injection
• SQL injection

Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi

• Creative Mail
• SQL injection

Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle

• Apache Software Foundation Apache Portable Runtime Utility
• SQL injection

WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

• nickboss WordPress File Upload
• SQL injection

WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability

• wpjobportal WP Job Portal
• SQL injection

WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

• Qode Tours
• SQL injection

WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability

• miniOrange WP OAuth Server
• SQL injection

WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability

• NSquared Simply Schedule Appointments
• SQL injection

SQLi in Loca Software's CMS

• Loca Software Informatics Technology Ltd. Co. CMS
• SQL injection

SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection

• SourceCodester Computer Repair Shop Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System servicetype.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number

• WPCargo Track & Trace
• SQL injection

Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import

• Welcart e-Commerce
• SQL injection

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in paginated list endpoints

• SQL injection

Rongzhitong Visual Integrated Command and Dispatch Platform findAll sql injection

• Rongzhitong Visual Integrated Command and Dispatch Platform
• Other injection
• SQL injection

imranrisal-dev Student-Management-System Login loginCheckTest.php sql injection

• imranrisal-dev Student-Management-System
• Other injection
• SQL injection

Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation

• Directus
• SQL injection

Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter

• intelliants subrion
• SQL injection

Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

• Koha
• SQL injection

Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection

• cacti
• SQL injection

ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filter

• chirpstack
• SQL injection

Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Parameter

• absmach magistrala
• SQL injection

Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion

• Harsh21Patel Inventory-Management-System-PHP
• SQL injection