Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.7 High
SQL Injection in WebCTI
- Slican IPx
- SQL injection
- CVSS 7.5 High
Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter
- jackdewey Link Library
- SQL injection
- CVSS 8.6 High
SQL injection in Znuny
- Znuny
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL injection in Wheels
- Wheels
- SQL injection
- CVSS 7.0 High
n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field
- n8n
- SQL injection
- CVSS 6.9 Medium
cemtan sar2html Archive Processing sar2html.py updateDb sql injection
- cemtan sar2html
- Other injection
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 8.8 High
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 6.5 Medium
WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
- LabRedesCefetRJ WeGIA
- Command injection
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 6.9 Medium
cemtan sar2html sar2html.py index sql injection
- cemtan sar2html
- Other injection
- SQL injection
- CVSS 7.1 High
InvoiceShelf ORDER BY SQL injection through orderByField
- InvoiceShelf
- SQL injection
- CVSS 8.7 High
DataEase: Stored SQL Injection in group-field binning bounds
- dataease
- SQL injection
- CVSS 8.7 High
DataEase: SQL Injection in datasource metadata identifiers
- dataease
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username
- e107
- SQL injection
- CVSS 8.7 High
Redash: SQL Injection via Query Results parameterized query substitution
- redash
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
- Juniper Networks Junos OS
- SQL injection
- CVSS 8.7 High
SQL Injection
- Tenable, Inc. Nessus
- SQL injection
- CVSS 7.2 High
MOVEit Transfer SQL injection in custom reporting
- Progress MOVEit Transfer
- SQL injection
- CVSS 7.1 High
Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter
- Yiuman citrus
- SQL injection
- CVSS 7.1 High
Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter
- dromara skyeye
- SQL injection
- CVSS 6.1 Medium
SQL injection in Dell PowerScale InsightIQ
- Dell PowerScale InsightIQ
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce
- Channel Software WebAlliance eCommerce
- SQL injection
- CVSS 4.4 Medium
HPE NonStop TSQLEXE - Memory Corruption vulnerability
- Hewlett Packard Enterprise HPE NonStop TSQLEXE
- SQL injection
- CVSS 8.5 High
WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability
- Webnus Modern Events Calendar Lite
- SQL injection
- CVSS 7.2 High
Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters
- Koha
- SQL injection
- CVSS 8.5 High
WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
- Codepeople CP Multi View Event Calendar
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Command Injection Vulnerability in JTL-WMS
- JTL SW GmbH JTL-WMS
- SQL injection
- CVSS 8.6 High
Fast Courier 5.0.0 - 5.2.3 - Unauthenticated SQLi via 'wp_order_id' Parameter
- Fast Courier
- SQL injection
- CVSS 8.6 High
Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook
- Walletdoc Payment Gateway for WooCommerce
- SQL injection
- CVSS 6.5 Medium
Hyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter
- Hyyan WooCommerce Polylang Integration
- SQL injection
- CVSS 7.5 High
Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter
- Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
- SQL injection
- CVSS 7.5 High
JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection
- ntbyk JTL-Connector for WooCommerce
- SQL injection
- CVSS 7.5 High
Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter
- pasyuk Gmedia Photo Gallery
- SQL injection
- CVSS 7.5 High
Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- SQL injection
- CVSS 8.6 High
Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter
- Omnispace Agora Project
- SQL injection
- CVSS 8.6 High
Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter
- Omnispace Agora Project
- SQL injection
- CVSS 8.7 High
Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]
- Omnispace Agora Project
- SQL injection
- CVSS 7.1 High
Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Experience Manager 6.5
- SQL injection
- CVSS 8.8 High
Configuration Manager Elevation of Privilege Vulnerability
- Microsoft Configuration Manager
- Microsoft Configuration Manager 2509
- SQL injection
- CVSS 8.0 High
Microsoft Configuration Manager Elevation of Privilege Vulnerability
- Microsoft Configuration Manager
- Microsoft Configuration Manager 2509
- SQL injection
- CVSS 8.8 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- SQL injection
- CVSS 6.5 Medium
SQL injection in Fortinet FortiManager Cloud and others
- Fortinet FortiManager Cloud
- Fortinet FortiAnalyzer Cloud
- SQL injection
- CVSS 5.9 Medium
SQL injection in Fortinet FortiAnalyzer Cloud and others
- Fortinet FortiAnalyzer Cloud
- Fortinet FortiAnalyzer
- SQL injection
- CVSS 6.5 Medium
SQL injection in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- SQL injection
- CVSS 7.9 High
SQL injection in Fortinet FortiAnalyzer Cloud and others
- Fortinet FortiAnalyzer Cloud
- Fortinet FortiAnalyzer
- SQL injection
- CVSS 7.7 High
SQL injection in Fortinet FortiMail
- Fortinet FortiMail
- SQL injection
- CVSS 8.7 High
Frappe: Possibility of SQL injection in reportview
- frappe
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Reviewer System index.php prepare sql injection
- SourceCodester Online Reviewer System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Exam System Login Endpoint loginExe.php sql injection
- SourceCodester Online Exam System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection
- SourceCodester Art Gallery Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
- CVSS 6.9 Medium
girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
- CVSS 6.9 Medium
girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
- CVSS 7.7 High
SQL injection in Siemens RUGGEDCOM CROSSBOW
- Siemens RUGGEDCOM CROSSBOW
- SQL injection
- CVSS 8.4 High
SQL injection in Siemens RUGGEDCOM CROSSBOW
- Siemens RUGGEDCOM CROSSBOW
- SQL injection
- CVSS 8.7 High
SQL injection in Siemens RUGGEDCOM CROSSBOW
- Siemens RUGGEDCOM CROSSBOW
- SQL injection
- CVSS 8.7 High
SQL injection in Siemens RUGGEDCOM CROSSBOW
- Siemens RUGGEDCOM CROSSBOW
- SQL injection