SQL injection.

itsourcecode Sales and Inventory System sup_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System pro_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System emp_searchfrm.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

PHPGurukul Student Information System student_edit1.php sql injection

• PHPGurukul Student Information System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System emp_del.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

itsourcecode Sales and Inventory System emp_edit.php sql injection

• itsourcecode Sales and Inventory System
• Other injection
• SQL injection

WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields

• WP Ultimate CSV Importer
• SQL injection

Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}

• Rest Routes
• SQL injection

MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets

• SQL injection
• CWE-116

<3.2.4 || >=3.3.0, <3.3.4 || >=3.4.0, <3.4.6 || >=3.5.0, <3.5.3 · fixed in 3.2.4, 3.3.4, 3.4.6, 3.5.3

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• SQL injection

MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

• MongoDB BI Connector
• SQL injection

MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

• MongoDB BI Connector
• SQL injection

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

• SQL injection
• Code injection

<12.3.10 || >=2026.1.0, <2026.1.6 · fixed in 12.3.10, 2026.1.6

Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes

• SQL injection

<2025.4.6 || >=2026.1.0, <2026.1.6 · fixed in 2025.4.6, 2026.1.6

WsgiDAV MySQL provider has a blind SQL injection

• SQL injection

<4.3.5 · fixed in 4.3.5

WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability

• VillaTheme WPBulky
• SQL injection

SQL injection in Open-Xchange GmbH OX Dovecot Pro and others

• Open-Xchange GmbH OX Dovecot Pro
• Open-Xchange GmbH OX Dovecot CE
• SQL injection

Joomla Extension - Jefferson49 - Unauthenticated blind SQLi in Sexy Polling Reloaded < 5.6.1

• Jefferson49 Sexy Polling Reloaded extension for Joomla
• SQL injection

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

• digital-peak.com DP Calendar extension for Joomla
• SQL injection

wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter

• tomdever wpForo Forum
• SQL injection

Dimension SQL Injection in Scheduled Report

• WatchGuard Dimension
• SQL injection
• Insecure deserialization

Dimension SQL Injection in Log Viewer

• WatchGuard Dimension
• SQL injection

Dimension SQL Injection in Audit Report

• WatchGuard Dimension
• SQL injection
• Insecure deserialization

Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

• dolibarr
• SQL injection

Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause

• ServiceNow AI Platform
• SQL injection

Multiple Vulnerabilities in TOOOLS' iSquad

• TOOOLS iSquad
• SQL injection

Multiple Vulnerabilities in TOOOLS' iSquad

• TOOOLS iSquad
• SQL injection

Multiple Vulnerabilities in TOOOLS' iSquad

• TOOOLS iSquad
• SQL injection

Multiple Vulnerabilities in TOOOLS' iSquad

• TOOOLS iSquad
• SQL injection

Multiple Vulnerabilities in TOOOLS' iSquad

• TOOOLS iSquad
• SQL injection

Multiple Vulnerabilities in TOOOLS' iSquad

• TOOOLS iSquad
• SQL injection

WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability

• VillaTheme Suggestion Engine for WooCommerce
• SQL injection

WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability

• Jonathan de Jong Beautiful Taxonomy Filters
• SQL injection

WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

• LikeBtn Like Button Rating
• SQL injection

WordPress Epayco plugin <= 8.4.6 - SQL Injection vulnerability

• Epayco
• SQL injection

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

• ACPT (Pro) - Custom Post Types Plugin for WordPress
• SQL injection

WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerability

• Liquid Web, LLC Kadence Shop Kit
• SQL injection

WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability

• CODEPRESS IT Solutions LLC Visitor Traffic Real Time Statistics Pro
• SQL injection

A SQL injection vulnerability was found in YzmCMS 7.5.

• SQL injection

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.

• SQL injection

SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection

• SourceCodester Simple Online Food Ordering System
• Other injection
• SQL injection

SQL injection in Dell Power Protect Cyber Recovery and others

• Dell Power Protect Cyber Recovery
• Dell Cyber Recovery
• SQL injection

Thinking Software Technology｜Efence - SQL Injection

• Thinking Software Technology Efence
• SQL injection

SQL injection vulnerability in ZTE SCP product

• ZTE SCP
• SQL injection

WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters

• wpgenie WooCommerce Lottery
• SQL injection

RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter

• RegistrationMagic
• SQL injection

Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters

• Tutor LMS
• SQL injection

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.

• SQL injection

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution.

• SQL injection

The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection.

• SQL injection

The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection.

• SQL injection

An issue was discovered in LibreNMS 1.65.

• SQL injection

An issue was discovered in LibreNMS 1.65.

• SQL injection

code-projects Simple Inventory System edit.php sql injection

• code-projects Simple Inventory System
• Other injection
• SQL injection

SililaWijesinghe Food Ordering System search.php sql injection

• SililaWijesinghe Food Ordering System
• Other injection
• SQL injection

Webkul QloApps SQL injection

• Webkul QloApps
• SQL injection

Webkul QloApps SQL injection

• Webkul QloApps
• SQL injection

liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection

• TREK
• Other injection
• SQL injection

Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter

• wpcreatix Media Sweep – WordPress Media Cleaner
• SQL injection