Advisories · Weakness
SQL injection.
Untrusted input reaching a database query. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.7 High
SQL injection in Siemens RUGGEDCOM CROSSBOW
- Siemens RUGGEDCOM CROSSBOW
- SQL injection
- CVSS 7.6 High
WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability
- Link Whisper INC Link Whisper Free
- SQL injection
- CVSS 7.6 High
WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability
- PluginUs.Net WOLF
- SQL injection
- CVSS 6.9 Medium
AdithyaYelloju Restaurant-Management-System Password Reset forgot3.php sql injection
- AdithyaYelloju Restaurant-Management-System
- Other injection
- SQL injection
- CVSS 4.9 Medium
Animated Number Counters <= 3.0 - Authenticated (Editor+) SQL Injection via 'counterid' Parameter
- wpmart Animated Number Counters
- SQL injection
- CVSS 6.9 Medium
itsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection
- itsmeravitejak Online-Examination-System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Performance Indicator System sales_history.php sql injection
- SourceCodester Performance Indicator System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Performance Indicator System edit_credit.php sql injection
- SourceCodester Performance Indicator System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Performance Indicator System product.php sql injection
- SourceCodester Performance Indicator System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Performance Indicator System edit_quantity.php sql injection
- SourceCodester Performance Indicator System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Performance Indicator System addproduct.php sql injection
- SourceCodester Performance Indicator System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Online Cake Ordering System addtransacdetail.php sql injection
- itsourcecode Online Cake Ordering System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Online Reviewer System User Update btn_functions.php sql injection
- code-projects Online Reviewer System
- Other injection
- SQL injection
- CVSS 8.8 High
SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
- SAP_SE SAP Commerce Cloud (OOTB Code)
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 16.6.0 SQL Injection via Missing Input Validation
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parameters
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validation
- frappe erpnext
- SQL injection
- CVSS 6.9 Medium
Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoints
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.119.1 SQL Injection via Missing Validation
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 16.34.2 SQL Injection via Multiple Endpoints
- frappe erpnext
- SQL injection
- CVSS 7.1 High
Frappe ERPNext before 15.119.1 SQL Injection via Missing Input Validation
- frappe erpnext
- SQL injection
- CVSS 8.7 High
Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoint Input
- frappe erpnext
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint
- thorsten phpMyFAQ
- SQL injection
- CVSS 5.3 Medium
itsourcecode Online Admission System sum.php sql injection
- itsourcecode Online Admission System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Baptism Information Management System pbaptism.php sql injection
- itsourcecode Baptism Information Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Baptism Information Management System ebaptism.php sql injection
- itsourcecode Baptism Information Management System
- Other injection
- SQL injection
- CVSS 7.1 High
LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
- librenms
- SQL injection
- CVSS 6.9 Medium
Exponent CMS XML-RPC xmlrpc.php userLogin sql injection
- Exponent CMS
- Other injection
- SQL injection
- CVSS 7.1 High
LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
- LogicalDOC Community Edition
- SQL injection
- CVSS 7.1 High
LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
- LogicalDOC Community Edition
- SQL injection
- CVSS 5.1 Medium
Zen Cart Module Configuration modules.php sql injection
- Zen Cart
- Other injection
- SQL injection
- CVSS 2.1 Low
Zen Cart Admin Panel configuration.php eval sql injection
- Zen Cart
- Other injection
- SQL injection
- CVSS 7.1 High
SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5
- Dassault Systèmes Tuleap Enterprise Edition
- SQL injection
- CVSS 6.9 Medium
Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection
- Zen Cart
- Other injection
- SQL injection
- CVSS 5.3 Medium
DataEase Utils.java Utils.buildCalcField sql injection
- DataEase
- Other injection
- SQL injection
- CVSS 5.3 Medium
Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
- Tencent WeKnora
- Other injection
- SQL injection
- CVSS 7.5 High
SQL Injection in Clustering Communication (Hybrid Mode)
- Kong Enterprise Gateway
- Kong Gateway
- SQL injection
- CVSS 5.3 Medium
SEMCMS SEMCMS_Banner.php sql injection
- SEMCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
SEMCMS SEMCMS_Download.php sql injection
- SEMCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injection
- krupalshah EmployeeRecruitmentSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection
- krupalshah EmployeeRecruitmentSystem
- Other injection
- SQL injection
- CVSS 6.9 Medium
krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection
- krupalshah EmployeeRecruitmentSystem
- Other injection
- SQL injection
- CVSS 7.1 High
SQL injection in Night Shift bulk license plate search allows cross-organization data access
- Flock Night Shift
- SQL injection
- CVSS 6.9 Medium
jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection
- jackq XCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
- ZKTeco BioTime
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.9 Medium
Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Interuse i-Bos
- SQL injection
- CVSS 5.3 Medium
erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection
- erzhongxmu Jeewms
- Other injection
- SQL injection