Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System settings_edit.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System emp_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode School Management System User_Login.php sql injection
- itsourcecode School Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Information System Society Membership System check_student.php sql injection
- itsourcecode Information System Society Membership System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System us_transac.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System sup_transac.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System pro_transac.php add sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System pos_transac.php add sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System cust_transac.php add sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System us_del.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System sup_del.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.4 Medium
PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON
- DALIBO PostgreSQL Anonymizer
- SQL injection
- CVSS 8.8 High
PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries
- DALIBO PostgreSQL Anonymizer
- SQL injection
- CVSS 6.9 Medium
Mstfakts College-Management-System Search university.php mysqli_query sql injection
- Mstfakts College-Management-System
- Other injection
- SQL injection
- CVSS 6.9 Medium
rabindralamsal inventory-management-system Login index.php sql injection
- rabindralamsal inventory-management-system
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System delete_user_account.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System delete_user.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Task Management System In PHP Login index.php sql injection
- code-projects Task Management System In PHP
- Other injection
- SQL injection
- CVSS 5.3 Medium
DefaultFuction CRM delete.php sql injection
- DefaultFuction CRM
- Other injection
- SQL injection
- CVSS 5.3 Medium
DefaultFuction CRM delete.php sql injection
- DefaultFuction CRM
- Other injection
- SQL injection
- CVSS 5.3 Medium
DefaultFuction CRM edit.php sql injection
- DefaultFuction CRM
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Content Management System login.php sql injection
- code-projects Content Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System trans_view.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System pro_del.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Voting System ajax.php login sql injection
- SourceCodester Online Voting System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Voting System ajax.php delete_category sql injection
- SourceCodester Online Voting System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Voting System ajax.php delete_voting sql injection
- SourceCodester Online Voting System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Voting System ajax.php save_user sql injection
- SourceCodester Online Voting System
- Other injection
- SQL injection
- CVSS 6.8 Medium
YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax
- Video Player for YouTube
- SQL injection
- CVSS 6.8 Medium
Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
- Kirki
- SQL injection
- CVSS 8.6 High
Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler
- Music Store
- SQL injection
- CVSS 5.1 Medium
code-projects Online Shopping System adduser.php mysqli_query sql injection
- code-projects Online Shopping System
- Other injection
- SQL injection
- CVSS 4.9 Medium
Emlog Blind SQL Injection via Authentication Cookie
- emlog
- SQL injection
- CVSS 8.7 High
ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
- ILIAS
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
- IBM Operational Decision Manager
- SQL injection
- CVSS 7.1 High
llmware 0.4.6 SQL Injection via unescaped filter values
- llmware
- SQL injection
- CVSS 8.8 High
Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore Module
- Apache Software Foundation Apache Griffin Hive Metastore Module
- SQL injection
- CVSS 6.9 Medium
code-projects Vehicle Management System busprofile.php sql injection
- code-projects Vehicle Management System
- Other injection
- SQL injection
- CVSS 8.8 High
SQL Injection in TAC Information's GoldenHorn
- TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT
- SQL injection
- CVSS 8.7 High
Interinfo|DreamMaker - SQL Injection
- Interinfo DreamMaker
- SQL injection
- CVSS 7.6 High
WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
- Automattic WooCommerce
- SQL injection
- CVSS 4.1 Medium
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
- WPLP Cookie Consent
- SQL injection
- CVSS 6.9 Medium
code-projects Doctor Appointment System contactus.php sql injection
- code-projects Doctor Appointment System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Doctor Appointment System booking.php sql injection
- code-projects Doctor Appointment System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Hospital Information System PrespController.php getSinglePresp sql injection
- code-projects Hospital Information System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Hospital Information System viewReq.php viewReq sql injection
- code-projects Hospital Information System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Hospital Information System addReq.php findBySearch sql injection
- code-projects Hospital Information System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System inv_del.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
light0011 cms Query Builder ChapterController.class.php searchChapter sql injection
- light0011 cms
- Other injection
- SQL injection
- CVSS 7.4 High
SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path
- SQL injection
- CVSS 8.8 High
SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel
- SQL injection
- Code injection
<0.0.0-20260723035036-0a176345e02a · fixed in 0.0.0-20260723035036-0a176345e02a
GHSA-x67c-8pwr-m8g3 · CVE-2026-72807 - CVSS 9.9 CriticalCritical · CVSS 9+
SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle
- SQL injection
<0.0.0-20260723004839-1a5b3431d5ab · fixed in 0.0.0-20260723004839-1a5b3431d5ab
GHSA-q2vg-7qgx-x5fc · CVE-2026-72811