Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.5 High
Toptech TMS7 and TopHAT SQL Injection
- Toptech Systems TMS7
- Toptech Systems TopHAT
- SQL injection
- CVSS 8.5 High
Toptech TMS7 and TopHAT SQL Injection
- Toptech Systems TMS7
- Toptech Systems TopHAT
- SQL injection
- CVSS 8.5 High
Toptech TMS7 and TopHAT SQL Injection
- Toptech Systems TMS7
- Toptech Systems TopHAT
- SQL injection
- CVSS 8.5 High
Toptech TMS7 and TopHAT SQL Injection
- Toptech Systems TMS7
- Toptech Systems TopHAT
- SQL injection
- CVSS 6.9 Medium
risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection
- risesoft-y9 WorkFlow-Engine
- Other injection
- SQL injection
- CVSS 7.5 High
Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parameters
- Wikimedia Foundation Mediawiki - UserPageViewTracker Extension
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Fumeng Cloud SQL Injection via AjaxMethod.ashx getEmpByname
- Fumasoft Fumeng Cloud
- SQL injection
- CVSS 8.7 High
Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp
- Yonyou A6 OA
- SQL injection
- CVSS 6.9 Medium
mahonelau kykms SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder sql injection
- mahonelau kykms
- Other injection
- SQL injection
- CVSS 7.0 High
ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter
- MacWarrior clipbucket-v5
- SQL injection
- CVSS 7.0 High
ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter
- MacWarrior clipbucket-v5
- SQL injection
- CVSS 6.3 Medium
Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag
- Apache Software Foundation Apache Airflow Teradata provider
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Flowring Agentflow 4.0 - SQL Injection
- Flowring Technology Corp Agentflow 4.0
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Flowring Agentflow 4.0 - SQL Injection
- Flowring Technology Corp Agentflow 4.0
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component.
- SQL injection
- CVSS 7.1 High
SiYuan before v3.8.4 SQL Injection via Block Query Embed
- siyuan
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6
- ordasoft.com Book Library (Free) extension for Joomla
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9
- ordasoft.com Real Estate Manager (Free) extension for Joomla
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8
- ordasoft.com Vehicle Manager (Free) extension for Joomla
- SQL injection
- CVSS 5.3 Medium
code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection
- code-projects Matrimonial System
- Other injection
- SQL injection
- CVSS 8.8 High
SQLi in Iron Mountain's enVision
- Iron Mountain Archiving Services Inc. enVision
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Time-based SQL Injection in Dayforce ESS Excelity
- Dayforce ESS Excelity
- SQL injection
- CVSS 5.1 Medium
dayrui XunruiCMS Group Editing Home.php group_all_edit sql injection
- dayrui XunruiCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project makeresult.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 5.1 Medium
aaPanel BaoTa Domain domainMod.py get_domain_status sql injection
- aaPanel BaoTa
- Other injection
- SQL injection
- CVSS 5.1 Medium
aaPanel BaoTa data.py getData sql injection
- aaPanel BaoTa
- Other injection
- SQL injection
- CVSS 6.8 Medium
SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search
- SPS-Suite
- SQL injection
- CVSS 6.4 Medium
Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter
- Post Voting System
- SQL injection
- CVSS 5.3 Medium
DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection
- DevaslanPHP project-management
- Other injection
- SQL injection
- CVSS 5.3 Medium
DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection
- DevaslanPHP project-management
- Other injection
- SQL injection
- CVSS 5.3 Medium
mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection
- amirsanni Mini-Inventory-and-Sales-Management-System
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 8.7 High
AzuraCast before 0.23.8 DQL Injection via sortOrder
- AzuraCast
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 8.3 High
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
- lomart.fr UP plugin for Joomla
- SQL injection
- CVSS 8.3 High
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0
- acymailing.com AcyMailing extension for Joomla
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3
- joomlaboat.com YouTube Gallery extension for Joomla
- SQL injection
- CVSS 8.9 High
Budibase before 3.45.0 SQL Injection via column-rename DDL
- budibase server
- SQL injection
- CVSS 8.7 High
SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath
- siyuan
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project mydetailsfaculty.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project updatedetailsfromstudent.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
mathurvishal CloudClassroom-PHP-Project updateguest.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.5 Medium
WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter
- wp-review-slider-pro
- SQL injection
- CVSS 6.8 Medium
Bluff Post <= 1.1.1 - Unauthenticated SQLi via 'table_name' and 'column_name' Parameters
- Bluff Post
- SQL injection
- CVSS 7.1 High
GLPI: SQL injection in history tab
- glpi
- SQL injection
- CVSS 5.3 Medium
mathurvishal CloudClassroom-PHP-Project managevideos2.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project updatefaculty.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 5.3 Medium
mathurvishal CloudClassroom-PHP-Project Student Update Functionality updatestudent.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project updatequery.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project Faculty Authentication loginlinkfaculty.php sql injection
- mathurvishal CloudClassroom-PHP-Project
- Other injection
- SQL injection
- CVSS 7.2 High
Piwigo: Second-Order SQL Injection
- Piwigo
- SQL injection
- CVSS 8.1 High
Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)
- Piwigo
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`
- Piwigo
- SQL injection
- CVSS 7.2 High
Piwigo: SQL Injection in Batch Manager
- Piwigo
- SQL injection
- CVSS 7.2 High
InvoicePlane permits DDL injection through tax_rate_decimal_places
- InvoicePlane
- SQL injection
- CVSS 6.0 Medium
InvoicePlane: Second-order SQL injection through the unvalidated custom_field_table field in the Custom Fields module
- InvoicePlane
- SQL injection
- CVSS 7.6 High
IBM Guardium Data Protection is affected by multiple vulnerabilities.
- IBM Guardium Data Protection
- SQL injection