SQL injection.

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

• SQL injection

>=7.0.0, <9.4.0 · fixed in 9.4.0

PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

• SQL injection
• Other injection

<4.6.78 · fixed in 4.6.78

WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

• Appsbd Vitepos
• SQL injection

SQL injection in the NetBoard CRM demo platform

• NetBoard CRM Demo Platform
• SQL injection

SQL injection in Brocade SANnav

• Brocade SANnav
• SQL injection

Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

• Splunk Enterprise
• SQL injection

Payload: SQL injection in SQLite/Postgres

• SQL injection

>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

• Passionate Programmer Peter WP Data Access
• SQL injection

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

• SQL injection

<0.0.0-20260625085520-a7d027dc684b · fixed in 0.0.0-20260625085520-a7d027dc684b

Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

• Cisco License On-Prem
• SQL injection

WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

• AF themes WP Post Author
• SQL injection

WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability

• Slider by 10Web
• SQL injection

WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

• Gopiplus Post title marquee scroll
• SQL injection

WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability

• Piggly Dev Pix por Piggly (para Woocommerce)
• SQL injection

SQL injection in Six Apart Ltd. Movable Type Cloud Edition and others

• Six Apart Ltd. Movable Type Cloud Edition
• Six Apart Ltd. Movable Type
• SQL injection

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

• Sarah Giles Dynamic User Directory
• SQL injection

WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

• SERVIT Software Solutions affiliate-toolkit
• SQL injection

SQL Injection Vulnerability in Manacle Technologies ERP System

• Manacle Technologies Multi-tenant ERP System
• SQL injection

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

• ordasoft.com OrdaSoft Simple Membership extension for Joomla
• SQL injection

MPG < 4.2.3 - Editor+ SQLi via Project Import

• MPG
• SQL injection

Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

• Animated Number Counters
• SQL injection

Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• SQL injection

Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• SQL injection

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• SQL injection

Payload: SQL Injection in SQLite and Postgres

• SQL injection

>=3.0.0, <3.88.0 || >=4.0.0-canary.0, <4.0.0-canary.27 · fixed in 3.88.0, 4.0.0-canary.27

SourceCodester Performance Indicator System view_product.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System search_class.php sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

• Kusalkasilva Learning-Management-System
• Other injection
• SQL injection

WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

• Cozmoslabs Paid Member Subscriptions
• SQL injection

WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability

• reputeinfosystems ARMember Premium
• SQL injection

WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability

• AndonDesign UDesign Core
• SQL injection

WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability

• p-themes Porto Theme - Functionality
• SQL injection

WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

• CridioStudio ListingPro
• SQL injection

WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

• Weblizar – WordPress Themes & Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email
• SQL injection

WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability

• brewlabs SendPress Newsletters
• SQL injection

WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

• Serhii Pasyuk Gmedia Photo Gallery
• SQL injection

WordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerability

• MightyNetworks vs BuddyBoss Buddyboss Platform
• SQL injection

WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability

• RadiusTheme Radius Booking — Booking Calendar for Appointments &amp; Services
• SQL injection

WordPress Woffice theme < 5.4.43 - SQL Injection vulnerability

• Woffice
• SQL injection

WordPress Booknetic plugin < 5.10.3 - SQL Injection vulnerability

• Booknetic
• SQL injection

WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability

• mooberrydreams Mooberry Book Manager
• SQL injection

WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

• wpgenie WooCommerce Lottery
• SQL injection

WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

• BookingWP WooCommerce Appointments
• SQL injection

WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

• Tobias @Saleswonder.biz WP2LEADS
• SQL injection

SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies

• RDL Technologies eLoanApp Platform
• SQL injection

SourceCodester Simple Student Information System searchquery.php sql injection

• SourceCodester Simple Student Information System
• Other injection
• SQL injection

bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection

• bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow templa…

• SQL injection

girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection

• feelec-yishu feelcrm-os
• Other injection
• SQL injection

Maestro: sql identifier injection via properties.* search filter and orderby field

• Red Hat Multicluster Engine for Kubernetes
• SQL injection

WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

• WP BASE Booking
• SQL injection

girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

• girishsaraf Online-Appointment-Booking-System
• Other injection
• SQL injection

onetwothreeneth HospitalManagementSystem print.php get sql injection

• onetwothreeneth HospitalManagementSystem
• Other injection
• SQL injection