Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.8 High
SQL injection in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- SQL injection
- CVSS 7.4 High
SQL injection in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- SQL injection
- CVSS 7.2 High
SQL injection in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- SQL injection
- CVSS 8.8 High
SQL injection in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL injection in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- SQL injection
- CVSS 8.8 High
SQL injection in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- SQL injection
- CVSS 8.8 High
SQL injection in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- SQL injection
- CVSS 5.3 Medium
Netmaker has a boolean‑based SQL Injection
- SQL injection
<1.5.0 · fixed in 1.5.0
GHSA-r8cr-4f9w-7r75 · CVE-2026-32599 - CVSS 8.7 High
Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
- j2commerce.com J2Store extension for Joomla
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Yonyou U8 CRM SQL Injection via fillbacksettingedit.php
- Yonyou U8 CRM
- SQL injection
- CVSS 8.5 High
Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`
- Concrete CMS
- SQL injection
- CVSS 8.5 High
Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field
- Concrete CMS
- SQL injection
- CVSS 6.9 Medium
WuzhiCMS index.php getDataOfJson sql injection
- WuzhiCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection
- SourceCodester Online Faculty Clearance System
- Other injection
- SQL injection
- CVSS 6.8 Medium
WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget Settings
- WP Directory Kit
- SQL injection
- CVSS 6.9 Medium
zyx0814 FilePress Publish search.php sql injection
- zyx0814 FilePress
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection
- SourceCodester Online Faculty Clearance System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Faculty Clearance System delete_requirement.php sql injection
- SourceCodester Online Faculty Clearance System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester/katojkalemba Online Food Ordering System order.php sql injection
- SourceCodester Online Food Ordering System
- katojkalemba Online Food Ordering System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection
- SourceCodester Online Food Ordering System
- katojkalemba Online Food Ordering System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester College Notes Gallery Management System login.php sql injection
- SourceCodester College Notes Gallery Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Daily Expense Tracker System forgot-password.php sql injection
- PHPGurukul Daily Expense Tracker System
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Daily Expense Tracker System Login index.php sql injection
- PHPGurukul Daily Expense Tracker System
- Other injection
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection.
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection
- PHPGurukul Blood Donor Management System
- Other injection
- SQL injection
- CVSS 8.7 High
Magistrala < 1.0.0 SQL Injection via format Parameter in Reader API
- absmach magistrala
- SQL injection
- CVSS 6.9 Medium
subhajitkhan online-clinic-management-system doctorlogin.php sql injection
- subhajitkhan online-clinic-management-system
- Other injection
- SQL injection
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Cisco Secure Email Gateway SQL Injection Vulnerability
- Cisco Secure Email
- SQL injection
- CVSS 5.3 Medium
itsourcecode Leave Management System index.php sql injection
- itsourcecode Leave Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Leave Management System login.php sql injection
- itsourcecode Leave Management System
- Other injection
- SQL injection
- CVSS 8.6 High
SQL Injection in Alior Bank raty PrestaShop module
- Alior Bank raty
- SQL injection
- CVSS 8.6 High
SQL Injection in Alior Bank raty PrestaShop module
- Alior Bank raty
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search
- Apache Software Foundation Apache Syncope
- SQL injection
- CVSS 6.9 Medium
Yot CMS Cookie global.php login sql injection
- Yot CMS
- Other injection
- SQL injection
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0
- joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Syncope: SQL injection via sort parameter in Task search
- Apache Software Foundation Apache Syncope
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence
- Apache Software Foundation Apache Syncope
- SQL injection
- CVSS 8.7 High
Thinking Software Technology｜EFence - SQL Injection
- Thinking Software Technology EFence
- SQL injection
- CVSS 6.9 Medium
subhajitkhan online-clinic-management-system listdoctor.php sql injection
- subhajitkhan online-clinic-management-system
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System pro_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System inv_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System sup_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System emp_transac.php add sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System save_class.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System cust_pos_trans.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System pay_report.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System delete_stud.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System save_stud.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 5.3 Medium
GongShengyue OnlineBooks listSplit BooksServlet.java sql injection
- GongShengyue OnlineBooks
- Other injection
- SQL injection
- CVSS 5.1 Medium
Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
- Fengoffice Feng Office
- Other injection
- SQL injection
- CVSS 6.9 Medium
Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection
- Fengoffice Feng Office
- Other injection
- SQL injection
- CVSS 5.8 Medium
SQL injection in LuxSoft LuxCal Web Calendar
- LuxSoft LuxCal Web Calendar
- SQL injection
- CVSS 5.0 Medium
SQL injection in LibreNMS
- LibreNMS
- SQL injection
- CVSS 6.5 Medium
Smart Marketing SMS and Newsletters Forms <= 5.1.24 - Authenticated (Subscriber+) SQL Injection via Parameter Name
- egoi Smart Marketing SMS and Newsletters Forms
- SQL injection
- CVSS 6.5 Medium
MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path
- themeisle MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO
- SQL injection
- CVSS 7.5 High
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter
- rtcamp rtMedia for WordPress, BuddyPress and bbPress
- SQL injection
- CVSS 8.6 High
Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action
- Album Cover Finder
- SQL injection
- CVSS 8.6 High
SAMO Forms <= 1.0.0 - Unauthenticated SQLi
- SAMO Forms
- SQL injection
- CVSS 7.6 High
WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerability
- Melograno Venture Studio Amelia
- SQL injection
- CVSS 7.6 High
WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
- wowDevs Sky Addons for Elementor
- SQL injection