SQL injection.

drogonframework drogon ORM Criteria.cc makeCriteria sql injection

• drogon
• Other injection
• SQL injection

drogonframework drogon ORM Mapper Mapper.h orderBy sql injection

• drogon
• Other injection
• SQL injection

QCMS Content Detail Controllers.php self_Tmp sql injection

• QCMS
• Other injection
• SQL injection

Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint (POST /user/authenticate).

• SQL injection

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.

• SQL injection

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

• OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
• OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
• SQL injection

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

• OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
• OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
• SQL injection

AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

• AdithyaYelloju Restaurant Management System
• Other injection
• SQL injection

AdithyaYelloju Restaurant-Management-System add_menu.php sql injection

• AdithyaYelloju Restaurant-Management-System
• Other injection
• SQL injection

itsourcecode Leave Management System index.php sql injection

• itsourcecode Leave Management System
• Other injection
• SQL injection

SourceCodester Drug Recommendation System edit_user.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

SourceCodester Drug Recommendation System edit_symptom.php sql injection

• SourceCodester Drug Recommendation System
• Other injection
• SQL injection

code-projects Internship Management System Admin Login Form login.php sql injection

• code-projects Internship Management System
• Other injection
• SQL injection

code-projects Internship Management System login.php sql injection

• code-projects Internship Management System
• Other injection
• SQL injection

code-projects Internship Management System login.php sql injection

• code-projects Internship Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

itsourcecode Leave Management System controller.php sql injection

• itsourcecode Leave Management System
• Other injection
• SQL injection

SourceCodester Online Reviewer Management System btn_functions.php sql injection

• SourceCodester Online Reviewer Management System
• Other injection
• SQL injection

OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filter

• openpanel
• SQL injection

Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter

• hiroaki-miyashita Custom Field Template
• SQL injection

GoPay for WooCommerce <= 1.0.36 - Authenticated (Shop Manager+) SQL Injection via 'log_table_filter' Parameter

• gopayplugins GoPay for WooCommerce
• SQL injection

Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter

• mischiefmarmot Create
• SQL injection

WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter

• sh1zen WP Optimizer – PageSpeed, Cache, Minify & Core Web Vitals
• SQL injection

Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter

• mischiefmarmot Create
• SQL injection

VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi

• VikRentItems Flexible Rental Management System
• SQL injection

CordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`

• 1Panel-dev CordysCRM
• SQL injection
• CWE-1284

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

CordysCRM: Customer Public Pool Sorting Field SQL Injection

• 1Panel-dev CordysCRM
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

pg_partman privilege escalation via SQL injection in when using pg_jobmon and encountering exception

• pgpartman pg_partman
• SQL injection

pg_partman privilege escalation via SQL injection when inheriting template properties

• pgpartman pg_partman
• SQL injection

pg_partman privilege escalation via SQL injection in several functions via time decoder

• pgpartman pg_partman
• SQL injection

pg_partman SQL injection in undo partition time encoder

• pgpartman pg_partman
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

pg_partman has privilege escalation through SQL injection in create_partition_time()

• pgpartman pg_partman
• SQL injection
• Privilege escalation

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• SQL injection

The IBM Platform RTM is affected by an SQL injection vulnerability

• spectrum-lsf : IBM Platform RTM
• SQL injection

Chanjet CRM SQL Injection via get_usedspace.php

• Chanjet Information Technology Co., Ltd. CRM
• SQL injection

Weaver E-cology SQL Injection via SyncUserInfo.jsp

• Weaver Network Co., Ltd. E-cology
• SQL injection

Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree

• Hongjing e-HR
• SQL injection

ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint

• MacWarrior clipbucket-v5
• SQL injection

ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint

• MacWarrior clipbucket-v5
• SQL injection

SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.go

• siyuan
• SQL injection

SQL injection in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• SQL injection

SQL injection in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• SQL injection

HCL BigFix Service Management is affected by multiple security vulnerabilities.

• HCL Software HCL BigFix Service Management
• SQL injection
• Information disclosure

Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters

• AyeCode Ltd Location Manager
• SQL injection

WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter

• wpexpertsio WP Multi Store Locator Pro
• SQL injection

Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute

• Photo Gallery by 10Web – Mobile-Friendly Image Gallery
• SQL injection

NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter

• webaways NEX-Forms – Ultimate Forms Plugin for WordPress
• SQL injection

WP Inventory Manager <= 2.5.1 - Authenticated (Contributor+) SQL Injection via 'where' Shortcode Attribute

• chuck1982 WP Inventory Manager
• SQL injection

WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter

• wclovers WCFM Marketplace – Multivendor Marketplace for WooCommerce
• SQL injection

InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key

• revmakx InfiniteWP Client
• SQL injection