SQL injection.

FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover

• FreePBX missedcall
• SQL injection

IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror []

• i
• SQL injection

ASP-CMS SQL Injection via commentList.asp id Parameter

• ASP-CMS
• SQL injection

Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree

• Hongjing Century e-HR
• SQL injection

Zalktis: SQL injection via partner-controlled fields in imported e-invoices

• Zalktis
• SQL injection
• CWE-20

CMS Admin SQL Injection via db_data.php table_name Parameter

• Saurus CMS Community Edition
• SQL injection

SourceCodester Simple Student Information System view_department.php sql injection

• SourceCodester Simple Student Information System
• Other injection
• SQL injection

Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name

• SQL injection
• CWE-20

<12.3.9 || >=2026.1.0, <2026.1.5 · fixed in 12.3.9, 2026.1.5

WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

• Arraytics Booktics
• SQL injection

WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability

• MailChimp For WooCommerce
• SQL injection

WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

• MVPThemes Reviewer
• SQL injection

WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

• andy_moyle Church Admin
• SQL injection

WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

• everestthemes Everest Backup
• SQL injection

WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability

• ThimPress RealPress
• SQL injection

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

• If-So Dynamic Content Personalization
• SQL injection

WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

• RealMag777 Active Products Tables for WooCommerce
• SQL injection

WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

• CODEPRESS Visitor Traffic Real Time Statistics Pro
• SQL injection

WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

• Webilia Inc. Listdom
• SQL injection

WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

• denishua WPJAM Basic
• SQL injection

WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

• Imran Tauqeer CubeWP
• SQL injection

WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

• Lasso Analytics, Inc. Do Lasso
• SQL injection

WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

• Shamalli Web Directory Free
• SQL injection

WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

• WPDirectoryKit WP Directory Kit
• SQL injection

WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

• WPDirectoryKit WP Directory Kit
• SQL injection

PostgreSQL expression deparse allows SQL injection via EXTRACT argument

• PostgreSQL
• SQL injection

SQL Injection

• Zohocorp ManageEngine Password Manager Pro
• Zohocorp ManageEngine PAM360
• SQL injection

Duplicate Advisory: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel

• SQL injection

* · no fixed version yet

Filter expression injection via forged keyset pagination cursor in Ash

• SQL injection
• Insecure deserialization

>=1.17.0, <3.31.3 · fixed in 3.31.3

IBM i is Affected By Multiple Vulnerabilities in SQL

• i
• SQL injection

CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field

• owen2345 CamaleonCMS
• SQL injection

CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field

• owen2345 CamaleonCMS
• SQL injection

IBM i is Affected By Multiple Vulnerabilities in SQL

• i
• SQL injection

IBM i is Affected By Multiple Vulnerabilities in SQL

• i
• SQL injection

IBM i is Affected By Multiple Vulnerabilities in SQL

• i
• SQL injection

phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration

• SQL injection
• Information disclosure

<4.2.0-alpha · fixed in 4.2.0-alpha

Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

• SQL injection

<1.2.13 · fixed in 1.2.13

SQL injection

• Phoenix Contact AXC F 1152
• Phoenix Contact AXC F 1252
• SQL injection

WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

• Essekia Tablesome Table
• SQL injection

WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

• WP Directory Kit
• SQL injection

WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter

• WP Directory Kit
• SQL injection

Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection

• Events Manager
• SQL injection

Form Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_name

• Form Maker by 10Web
• SQL injection

KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

• KiviCare
• SQL injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()

• Chocobozzz PeerTube
• SQL injection

Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp

• Weaver Network Co., Ltd. E-cology 9.0
• Weaver Network Co., Ltd. E-cology 8.0
• SQL injection

Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad

• Weaver Network Co., Ltd. E-cology 8.0
• SQL injection

Microsoft Entra Connect Elevation of Privilege Vulnerability

• Microsoft Entra Connect
• SQL injection

Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution

• twenty
• SQL injection

Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation

• Koha
• SQL injection

Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl

• Koha
• SQL injection

Koha Community Koha - Stored SQL Injection via Patron Card Layout image_name

• Koha
• SQL injection

Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age

• Koha
• SQL injection

e107 e107 - SQL Injection

• e107
• SQL injection

Pimcore pimcore admin-ui-classic-bundle - SQL Injection

• pimcore admin-ui-classic-bundle
• SQL injection

CiviCRM CiviCRM - SQL Injection

• CiviCRM
• SQL injection

Friendica Friendica - SQL Injection

• Friendica
• SQL injection

Win Men Intermational｜Travel Agency Management System - SQL Injection

• Win Men Intermational Travel Agency Management System
• SQL injection

SQL Injection vulnerability in SAP Social Intelligence

• SAP_SE SAP Social Intelligence
• SQL injection

ERPNext: Possibility of SQL injection due to missing validation

• frappe erpnext
• SQL injection